3 ms·

> For good security, you don't leak internal IDs at all, sure. It is rare to find people doing that. We must live in a different universe. I'd wager to say th

by siva7 3y ago

> For good security, you don't leak internal IDs at all, sure. It is rare to find people doing that. We must live in a different universe. I'd wager to say that over 90% of all backends leak their primary key when speaking to the front-facing client.

teaearlgraycold 3y ago
99.9%
CognitiveLens 3y ago
I think the statement was "It is rare to find people doing good security", not "It is rare to find people leaking internal IDs"
- emaro 3y ago
  I read it as '[…] you don't leak internal IDs at all […]. It is rare to find people doing that [i.e. not leaking internal IDs]'
- sroussey 3y ago
  Yeah, sorry not clear. Typing on iPhone never really gets the message across as clearly as using a PC
deleted 3y ago
[deleted]