(3) a race condition.
Fixing any one of these component weaknesses would eliminate or significantly reduce
the vulnerability. If a filename is unpredictable, then an attacker cannot reliably
pre-create a symbolic link with the expected name. If the file is created in a directory