...
Session IDs generated by Random may be able to be predicted, thus it is not recommended to use Random in production.
For more information, here are the relevant Sun bug numbers: 6202721, 6521844, 5031872.
Note that one of the workarounds suggested is to try and force the use of the /dev/urandom device, which does NOT block, rather than the /dev/random device which does:
| Code Block |
|---|
Set the system property: -Djava.security.egd=file:/dev/urandom
Make sure that the java.security file contains this setting:
securerandom.source=file:/dev/urandom
|
NB Some workaround reports use /dev/./urandom instead of /dev/urandom.