This never made it into prod since the scale was small, but one of the favorite leaks I found when working on bot detection was browsers which generated the same random numbers. Presumably because they were being init to the same VM snapshot and therefore the same random number state.