@seanmonstar is right about `Math.random()`. Something based on [`crypto.randomBytes()`](http://nodejs.org/api/all.html#all_crypto_randombytes_size_callback) is probably the way to go.