News for hackers. Stuff that matters.

A comment on Teenager facing prison for downloading unsecured files from government website. Parent comment

Re:Teenager facing prison for downloading unsecured files fr... by pluma on Tuesday April 17, 2018 @04:13AM (#16856453)
What is a UUID if not a fairly predictable object-based shared authorization token?

EDIT: I'm mostly kidding.

[ Parent | on HN ]
Re:Teenager facing prison for downloading unsecured files fr... by quickthrower2 on Tuesday April 17, 2018 @05:17AM (#16856702)
Just call it an object-specific API key, that forms part of the URI instead of being a header value. Since we are using https it's all good.
[ Parent | on HN ]