3 ms·

Hmm maybe I'm missing something, but why does this matter? For a long time, on Facebook, you didn't have a "username", you just had your "ID" in the URL. I'm ju

Hmm maybe I'm missing something, but why does this matter? For a long time, on Facebook, you didn't have a "username", you just had your "ID" in the URL. I'm just not sure how it could be exploited. I'd be more worried about it being hosted in China than user IDs being unencrypted.

ketamine__ 6y ago
As long as proper authorization for resources is in place I don't see the issue either.
bdcravens 6y ago
It's a metadata leak, not an authentication leak. A mapping of who is talking to who could be built up over time.