4 ms·
It's pretty common outside of rails too, like https://facebook.com/4 https://facebook.com/4 Some main weaknesses, if I recall correctly, is that's incremental
by gaogao 3y ago
It's pretty common outside of rails too, like https://facebook.com/4 https://facebook.com/4
Some main weaknesses, if I recall correctly, is that's incremental ids make scraping pretty easy, or guessing content outside of a URL given explicitly by the service (like here).
- david_allison 3y agoThey also leak metrics (#of registered users)
- simlevesque 3y agoAlso, competitors can analyze your growth more easily.
- cartothemax 3y agoYep, you're correct. Panera had an issue where folks could scrap every user profile due to sequential profile ids. The bigger part of the exploit was they just openly exposed user data but making the profiles ids sequential made it really easy to scrap https://krebsonsecurity.com/2018/04/panerabread-com-leaks-millions-of-customer-records/ https://krebsonsecurity.com/2018/04/panerabread-com-leaks-mi...