4 ms·

Well where else do users have public profiles?

• 0x3f 10mo ago
  The whole point though is that the ID itself leaks info, even if the profile is not public. There are many cases where you reference an object as a foreign key, even if you can't see the entire record of that foreign key.
  • nish__ 10mo ago
    I can't think of any.
    • strbean 10mo ago
      Sending a friend request is an obvious example.
      • nish__ 10mo ago
        Ok but in that case, why not use the user ID as the primary key?