Pikyo

Randomness vs Pseudorandomness Without the Hype

The word random gets used too loosely. Sometimes it means a physical source of entropy. Sometimes it means a deterministic generator. Sometimes it means a secure browser API. Those are not the same thing.

5 min read

Physical randomness comes from the physical world

Hardware systems can collect entropy from physical processes such as electrical noise or other measured events. Building a reliable system around those sources takes careful engineering and testing.

A spinning wheel or bouncing die on a screen is not physical randomness. It is an animation showing a result that software already generated.

Pseudorandom does not automatically mean weak

A pseudorandom generator produces values from an internal state. Some simple generators are predictable and useful mainly for simulation or testing. Cryptographically secure generators are designed to make practical prediction much harder.

This is why saying something is pseudorandom does not tell you enough on its own. You need to know which generator is being used and what the result is being used for.

What Pikyo uses

Modern browsers expose crypto.getRandomValues through the Web Crypto API. Pikyo uses that source and maps the generated values into the requested range without modulo bias.

That is a much better basis for a selection tool than Math.random. It still does not make Pikyo an independently audited lottery system or a certified randomness service.

Accurate language is better than impressive language

It is reasonable to say that Pikyo uses the browser cryptographic random number generator. It is not reasonable to turn that into claims such as guaranteed fairness, true randomness, certified randomness, or provably fair selection without the evidence to support them.

Good engineering language should tell users what the system actually does, not try to make it sound stronger than it is.

  • Name the random source accurately
  • Keep animation separate from result generation
  • Avoid guarantees that were never audited
  • Use specialized systems where regulation or security requires them

Treat this as practical guidance, not a replacement for legal, professional, or safety requirements where they apply.