https://www.reddit.com/r/ReverseEngineering/comments/6epn8o/i_forgot_your_password_randomness_attacks_against/ or https://crypto.di.uoa.gr/CRYPTO.SEC/Main.html
origin - http://www.pipiscrew.com/2017/06/i-forgot-your-password-randomness-attacks-against-php-applications/ i-forgot-your-password-randomness-attacks-against-php-applications