4 ms·

Because they leak details about the user's machine?

• mmalone 11y ago
  True of UUID1s, unless you bastardize them and use something other than MAC address. You could do UUID4s without leaking info.
  • fulafel 11y ago
    Those are just random numbers, back to square 1.
  • masklinn 11y ago
    Then you loop back to needing a quality PRNG, which is exactly TFA's issue.
  • dbenhur 11y ago
    UUID4 requires a good CSPRNG. Random isn't magic, you have to do the work.
• michaelmior 11y ago
  It seems as though these IDs are generated on the server. Leaking the MAC address of the server seems inconsequential to me.
  • asuffield 11y ago
    Leaking the MAC address of the user's machine is also inconsequential.