Typically I think of compromising the secrecy of inputs as the main RNG attack vector, but controlling the inputs is even better!