seems they aren't limited to just future output: "Using that private key, they can observe CSPRNG output on the wire, “decrypt it”, and use that to rewind and

seems they aren't limited to just future output: "Using that private key, they can observe CSPRNG output on the wire, “decrypt it”, and use that to rewind and fast-forward other people’s CSPRNGs, discovering their keys."