cnio cnio

Not all random values are created equal - for security-related code, you need a specific kind of random value.

A summary of this article, if you don't want to read the entire thing:

Don't use Math.random(). There are extremely few cases where Math.random() is the right answer. Don't use it, unless you've read this entire article, and determined that it's necessary for your case.
Don't use crypto.getRandomBytes directly. While it's a CSPRNG, it's easy to bias the result when 'transforming' it, such that the output becomes more predictable.
If you want to generate random tokens or API keys: Use uuid, specifically the uuid.v4() method. Avoid node-uuid - it's not the same package, and doesn't produce reliably secure random values.
If you want to generate random numbers in a range: Use random-number-csprng.

You should seriously consider reading the entire article, though - it's

	const originPriv = Buffer.from('c962bfd916c0f8d4c1866b11a24802815cf58ba981354fad0ac734d0217cfe73', 'hex')
	const txOrigin = cry.publicKeyToAddress(cry.secp256k1.derivePublicKey(originPriv))

	const delegatorPriv = Buffer.from('dce1443bd2ef0c2631adc1c67e5c93f13dc23a41c18b536effbbdcbcdb96fb65', 'hex')
	const delegator = cry.publicKeyToAddress(cry.secp256k1.derivePublicKey(delegatorPriv))

	const tx = new Transaction({
	chainTag: 0x27,
	blockRef: '0x002b99c540c4e267',
	expiration: 30 * 8640, // Expires after 30 days

	const originPriv = Buffer.from('c962bfd916c0f8d4c1866b11a24802815cf58ba981354fad0ac734d0217cfe73', 'hex')
	const txOrigin = cry.publicKeyToAddress(cry.secp256k1.derivePublicKey(originPriv))

	const delegatorPriv = Buffer.from('dce1443bd2ef0c2631adc1c67e5c93f13dc23a41c18b536effbbdcbcdb96fb65', 'hex')
	const delegator = cry.publicKeyToAddress(cry.secp256k1.derivePublicKey(delegatorPriv))

	const tx = new Transaction({
	chainTag: 0x27,
	blockRef: '0x002b99c540c4e267',
	expiration: 30 * 8640, // Expires after 30 days

	# in dockerfile
	RUN useradd -ms /bin/bash new_user_name
	# in cli
	useradd -ms /bin/bash new_user_name