A number or object is predictable based on observations that the attacker can make about the state of the system or network, such as time, process ID, etc.