4 ms·
The correct answer for using URLs as capabilities (which is what a 'secret URL' really is: a capability to a resource, which can be handed out, copied &c.) is t
by wtbob 11y ago
The correct answer for using URLs as capabilities (which is what a 'secret URL' really is: a capability to a resource, which can be handed out, copied &c.) is to use a 256-bit value as part of the URL. Thus, rather than 'http://example.invalid/TEAM-DOC-SHORT-RAND/' http://example.invalid/TEAM-DOC-SHORT-RAND/' use 'http://example.invalid/w6uP8Tcg6K2QR905Rms8iXTlksL6OD1KOWBxTK7wxPI' http://example.invalid/w6uP8Tcg6K2QR905Rms8iXTlksL6OD1KOWBxT.... If you're really paranoid, double the length. I guarantee it won't be guessed, in either case.
- Lazare 11y agoYes, exactly this. It's not rocket science; it's odd how much effort Slack put into implementing (and then reimplementing in a slightly less broken fashion) a clearly wrong solution.
- relaxnow 11y agoDon't forget that it should ideally be cryptographically random. If the sequence is predictable (like based on an auto incrementing number or on time) then you might still be able to guess a 256-bit number.
- wtbob 11y ago> Don't forget that it should ideally be cryptographically random. I thought that went without saying, nut yes, it must be cryptographically random (not ideally—it must be).
- evancordell 11y agow3 has some guidelines on capability urls: http://www.w3.org/TR/capability-urls/ http://www.w3.org/TR/capability-urls/
- tlb 11y agoThe guideline for unguessability in that TR just says to use a UUID. UUIDs are ugly, and quite long for the amount of randomness they contain. I prefer Slack's new 10*base36 solution.
- mikeash 11y agoUUIDs are often guessable, too, so that recommendation is just plain wrong (or at best, woefully incomplete).
- bmm6o 11y agoRight, some kinds of UUIDs achieve their uniqueness precisely by leveraging predictability. The unpredictable kind are mostly just random bits formatted in a particular (not very efficient) way.
- mikeash 11y agoThe random ones don't have to be unpredictable randomness, either. For example, you might seed a good RNG with the local MAC address and boot time and then use that to generate v4 UUIDs. As far as I can tell, this would be perfectly legal and should produce UUIDs that are as likely to be unique as any other, but they would also be easy for an attacker to predict.
- MichaelGG 11y agoBasically the whole "version" UUIDs is a stupid fever dream. Any sane implementation should return 16 random bytes and be done. The fact that there's a spec for this and it's longer than 2 sentences is just wrong.
- mikeash 11y agoI think they were just afraid of the birthday paradox. But I agree, just grabbing some random bytes really is the way to go. Although, I'm a bit afraid of the birthday paradox, maybe we should use 20 bytes instead....
- MichaelGG 11y agoThe idea that a UUID should have a "version" and the random one uses 122 bits instead of 128 bits sorta makes ya wonder how concerned they were.