It's a poison attack that randomizes the output, but it does not allow the attack to manipulate the outputs.