proof is in the article http://en.wikipedia.org/wiki/Reservoir_sampling