You can easily check whether former versions of shuffle used rand() or
not. rand() was never used. Also, the seed is rather weak - not horribly
but sub-optimal. Why not take advantage of /dev/{u,}random? OTOH, I
wouldn't expect shuffle to be cryptographically strong. It's just a
little nice tool to get something quickly into pseudo-random order.

-- 
Christian