We ran some tests with a similar library and about 15% of the time we'd get hash collisions from completely different users. Sure, my setup might be totally unique, but other peoples vanilla installs are identical.