diff --git a/lib/crypto/hash.js b/lib/crypto/hash.js
index f6a625a6a..730a79865 100644
--- a/lib/crypto/hash.js
+++ b/lib/crypto/hash.js
@@ -34,7 +34,7 @@ Hash.ripemd160 = function(buf) {
 
 // Node.js crypto ripemd160 hashes are not supported in a browser
 // We'll replace with a (slower) version that does.
-if (global.window) {
+if (process.browser) {
   Hash.ripemd160 = function(buf) {
     $.checkArgument(BufferUtil.isBuffer(buf));
     var hash = (new hashjs.ripemd160()).update(buf).digest();
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
index eb9566fbb..7aef13280 100644
--- a/npm-shrinkwrap.json
+++ b/npm-shrinkwrap.json
@@ -35,9 +35,9 @@
       "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
     },
     "lodash": {
-      "version": "2.4.1",
-      "from": "lodash@=2.4.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-2.4.1.tgz"
+      "version": "3.10.1",
+      "from": "lodash@=3.10.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
     },
     "sha512": {
       "version": "0.0.1",
diff --git a/package.json b/package.json
index e8ca584ca..9b3f7ba16 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,7 @@
     "elliptic": "=3.0.3",
     "hash.js": "=1.0.2",
     "inherits": "=2.0.1",
-    "lodash": "=2.4.1",
+    "lodash": "=3.10.1",
     "sha512": "=0.0.1"
   },
   "devDependencies": {