sandbox fixes. thanx to /dev/random