3 ms·
What about the insider risk prospective? A random int64 isn't that hard to guess if you can easily look at a database.
by bhawks 4y ago
What about the insider risk prospective? A random int64 isn't that hard to guess if you can easily look at a database.
- tptacek 4y agoIf you're looking at a database, you're not guessing. Otherwise: a random int64 is in fact difficult to guess.
- bhawks 4y agoExactly - which is why I was asking what is the nature of the insider threat risk if someone did not have to guess. In a prod deployment who has the rights to see this info without raising too many flags?
- tptacek 4y agoThe database that gives you all the random 64 bit IDs for devices: that's another vulnerability.