4 ms·
"Use UUIDs as primary keys. They can be freely exposed without disclosing sensitive information, they are not predictable and they are performant." When have a
by danielovichdk 9y ago
"Use UUIDs as primary keys. They can be freely exposed without disclosing sensitive information, they are not predictable and they are performant."
When have a primary key ever been sensitive infomation ? And why would they be predictable ?
- krapp 9y agoIf you use auto-incrementing IDs as both primary keys and account identifiers, which a lot of web applications do, it might be possible to identify admin and employee accounts because they're more likely to have the lower IDs. A recent Steam hack relied on this to allow bypassing the approval process for Greenlight[0]. [0]https://medium.com/swlh/watch-paint-dry-how-i-got-a-game-on-the-steam-store-without-anyone-from-valve-ever-looking-at-it-2e476858c753 https://medium.com/swlh/watch-paint-dry-how-i-got-a-game-on-...