How RNGs Get Practical Use In Software Solutions

Jan 26, 2024 | App Modernization, Cloud, Data, Mobile, Privacy, Social Media

by Chris Smith

If you have ever studied even the most basic levels of coding, there are a few projects that it’s almost guaranteed you did for practice. By tradition, the first was likely the ‘Hello World’ task that’s been the standard for decades, but after that, a random number generator was probably the follow-up. Despite being a ‘beginner’ code, RNGs have a critical place in many different industries and come in many different forms.

Simple and Complex RNGs

The place to find the most standard forms of RNGs is in the vast library of entertainment software. RNGs in entertainment apps can range from very simple, limited generators up to wide-ranging RNGs with extensive testing and moderation used when real money is at stake.

Source: Unsplash

For an example of the latter in a current industry, look no further than online casinos. Casino games run on the back of rigorously tested RNGs, which are so provably random that their RTPs, or returns to player, can only ever be given as averages. This means the games on a list like Betfair’s best RTP slots are never guaranteed wins, even if those with better RTPs have slightly better odds over a long session. The result is that these games can be confidently stated to be provably fair to all their players.

Data Security

A step above these systems would be those used for data security. The backbone of any data protection system is a robust encryption solution, and all high-level encryption runs on some form of RNG. To put it in the simplest possible way, data that is to be sent is encoded using a key randomly generated by the system, and once it is sent the only way it can be uncoded is by using that same key.

Different encryption algorithms use different exact methods but each follows the same basic principle. The main difference between these RNGs and the ones mentioned before is the scale. The keys generated can be up to 128 characters long or even 256 characters for the most advanced encryption. At that level, you’re looking at encryption used for things like US national security.

“True” RNGs

Beyond even the most complex and intricate RNGs are a category known as True RNGs. The distinction between these and other RNGs, known as pseudorandom number generators, is that these results do not have human interference at any point. Even the most complex programmed system has to have someone make limits for it. True RNGs instead rely on factors with no humans involved.

Source: Unsplash

To find these factors, we have often looked to nature. Some of the earliest examples used things like nuclear decay as a base, although the most popular option now is atmospheric noise such as Random.org’s service. The complete unpredictability means that results using it as a base are as close to perfectly random as we can get.

This has been a brief overview only, and random number generators have a far greater depth when studied in detail. We encourage you to put in some time and research this underappreciated part of coding.

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more
Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

September 4, 2026 | ITBriefcase.net Why it matters: ShinyHunters claimed responsibility for a breach of McKesson Corporation — the largest pharmaceutical distributor in North America, delivering approximately one-third of all prescription medicines to US hospitals,...

read more
Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

August 28, 2026 | ITBriefcase.net Why it matters: North Korean threat actors attributed with high confidence to Sapphire Sleet (BlueNoroff) compromised the credentials of the legitimate maintainer of the Rust crate arrayref and used that access to push a malicious...

read more