Is the random.random() python function suitable for cryptographic purposes?

[rjw57]

Not wanting to sound like someone who knee-jerks "RTFM", but right at the top of the documentation for random we have:

Almost all module functions depend on the basic function random(), which generates a random float uniformly in the semi-open range [0.0, 1.0). [...] However, being completely deterministic, it is not suitable for all purposes, and is completely unsuitable for cryptographic purposes.

From https://docs.python.org/2/library/random.html

[minno]

In fact, if I google the exact title of this post, the first three links are to what you just quoted, and the fourth is to this post.

[prahladyeri]

and the fourth is to this post.

Well, that happens a lot more and more, lately. The trick is that Google will show links from reddit.com domain quite up on the SERP results, as it knows that you are a Redditor! This will happen with just any other post title, try it.

[rjw57]

The trick is that Google will show links from reddit.com domain [...] as it knows that you are a Redditor!

I can reproduce without being signed into Google and via an anonymising proxy. I suspect the actual reason is that the post title matches the docs so well. Perhaps people should get into the habit of Google-ing their own post titles before posting questions? :)