Use SecureRandom instead of random.org
I just realized that an local but not-so-random random is way more safe than an purely-random but remotely generated random.