How do hackers reverse Math.random()?