News for hackers. Stuff that matters.

A comment on Hidden in plain sight: Brute-forcing Slack private files. Parent comment

Re:Hidden in plain sight: Brute-forcing Slack private files by mikeash on Friday November 06, 2015 @02:09PM (#10521307)
I think they were just afraid of the birthday paradox. But I agree, just grabbing some random bytes really is the way to go.

Although, I'm a bit afraid of the birthday paradox, maybe we should use 20 bytes instead....

[ Parent | on HN ]
Re:Hidden in plain sight: Brute-forcing Slack private files by MichaelGG on Friday November 06, 2015 @02:34PM (#10521477)
The idea that a UUID should have a "version" and the random one uses 122 bits instead of 128 bits sorta makes ya wonder how concerned they were.
[ Parent | on HN ]