News for hackers. Stuff that matters.

A comment on Show HN: Hoist – Zapier for Developers (scripting done in Node.js). Parent comment

Re:Show HN: Hoist – Zapier for Developers (scripting done in... by buildmaster on Monday October 12, 2015 @08:57PM (#10377829)
thanks for the link, I agree it's bad practice if there's any kind of lookup/security based on the slug. We have a few other mitigations against looking up anything security wise from the slug itself. but will take it into consideration as I agree it increases guess-ability of the slugs and could leave us open in future.
[ Parent | on HN ]
Re:Show HN: Hoist – Zapier for Developers (scripting done in... by nikolay on Wednesday October 14, 2015 @02:59PM (#10388617)
It's just an eyesore. If I see some random ID, I won't be bothered, but to see my name with some suffix to it - it's ugly and not a common practice anyway. There are better ways to generate unique IDs and hashids make them pretty short as well (shorter than their numerical counterparts, I mean).
[ Parent | on HN ]