Introduced protections against predictable RNG abuse

[pixeebot]

This change replaces all new instances of java.util.Random with the marginally slower, but much more secure java.security.SecureRandom.

We have to work pretty hard to get computers to generate genuinely unguessable random bits. The java.util.Random type uses a method of pseudo-random number generation that unfortunately emits fairly predictable numbers.

If the numbers it emits are predictable, then it's obviously not safe to use in cryptographic operations, file name creation, token construction, password generation, and anything else that's related to security. In fact, it may affect security even if it's not directly obvious.

Switching to a more secure version is simple and our changes all look something like this:

- Random r = new Random();
+ Random r = new java.security.SecureRandom();

More reading

• https://owasp.org/www-community/vulnerabilities/Insecure_Randomness
• https://metebalci.com/blog/everything-about-javas-securerandom/
• https://cwe.mitre.org/data/definitions/330.html

🧚🤖 Powered by Pixeebot

Feedback | Community | Docs | Codemod ID: pixee:java/secure-random

[pixeebot]

I'm confident in this change, but I'm not a maintainer of this project. Do you see any reason not to merge it?

If this change was not helpful, or you have suggestions for improvements, please let me know!

[pixeebot]

Switching to SecureRandom is almost always the right tradeoff. This chart (source) shows the true lack of randomness (re: predictability) of Random, if you needed more convincing:

If there are other concerns about this change, I'd love to hear about them!