I'm a new user running tarsnap on Win7 with Cygwin.
I work in Infosec / network security and am interested in where the entropy sources are coming from and how "good" they are, as this is a hot topic post-snowden.
The answer is in the source code, I guess; but I am not a developer.