From a brief trawl of the Android sources, it looks like Android's new-and-shiny OpenSSL-based SecureRandom only seeds the OpenSSL random generator if you open a TLS socket. If you don't - you will be using an unseeded OpenSSL RNG.

One thing that does stand out in Oracle's favor is the security record.

Oracle has real good internal processes for secure software design, implementation review, and emergency response. (I know this from people who have actually worked there and were subject to these processes– it's not just marketing fluff).

Postgres developers, on the other hand, willfully ignore security issues in their code on flimsy grounds.

My intro-to-CS professor (20 years ago... my, how time flies) used to illustrate sorting algorithms by sorting the students in class by height.
Once someone participates in a sorting algorithm, they sure won't forget :)

Tarsnap (http://www.tarsnap.com) positions itself as an “online backup for paranoids”, but should be easily usable for simple web-based storage.

Life: an invariably fatal sexually transmitted disease.

... Only people are not adopting the new ideas.

For example, I used to work with a tool called BugTrapper from MuTek Solutions (it's now called AppSuite, and the company is now called Identify Software). It can record an application's runtime trace, replay it, rewind it and provide many more helpful debugging tools. Unfortunately it never caught on (maybe because of its price), and nobody has copied the idea to open-source tools :-(