fix the package names
use a safe random source
support some URL blacklisting so they don't use OkHttp (since twitter REST search is not working right)