> If you're a level 500 elite hacker like I am, you will note that the cryptographic quality of numbers from /dev/urandom is not the same as numbers from /dev/random. In our case, we don't want this operation to block, so we use /dev/urandom.

This is wrong. See http://www.2uo.de/myths-about-urandom/

(The part about /dev/urandom not blocking is right though)

Edit: changed http://security.stackexchange.com/questions/3936/is-a-rand-f... to the current link, since the current link is more to the point.