4 ms·
At my company we only use UUIDs as PKs. Main reason I use it is the German Tank problem: https://en.wikipedia.org/wiki/German_tank_problem https://en.wikipedia
by reffaelwallen 10mo ago
At my company we only use UUIDs as PKs.
Main reason I use it is the German Tank problem: https://en.wikipedia.org/wiki/German_tank_problem https://en.wikipedia.org/wiki/German_tank_problem
(tl;dr; prevent someone from counting how many records you have in that table)
- littlestymaar 10mo agoWhat stops you from having another uuid field as publicly visible identifier (which is only a concern for a minority of your tables). This way you avoid most of the issues highlighted in this article, without compromising your confidential data.
- jakeydus 10mo agoI'm new to the security side of things; I can understand that leaking any information about the backend is no bueno, but why specifically is table size an issue?
- boruto 10mo agoIn my old company new joiners are assigned an monotonic number as id in tech. GitHub profile url reflected that. Someone may or may not have used the pattern to get to know the attrition rate through running a simple script every month))
- infragreen 10mo agoThis was a great read, thank you for sharing!
- andatki 10mo agoAppreciate it!