News for hackers. Stuff that matters.
Re:Database IDs Have No Place in URIs (2008) by geezerjay on Friday May 10, 2019 @09:17AM (#19877400)
Sequential numeric ids leak information regarding your operations.

https://en.m.wikipedia.org/wiki/German_tank_problem

Re:Database IDs Have No Place in URIs (2008) by wutman on Friday May 10, 2019 @03:19PM (#19881281)
This is exactly right, but in my opinion usually not important. If Joe Public, or a competitor, or whoever knows how many posts you have, users you have, administrators you have, etc how much does that actually affect your operation? I guess they can better compete against you in some small way with that information, but in my opinion it's almost never worth the effort to obfuscate. It's like optimizing for a problem you don't have.
Re:Database IDs Have No Place in URIs (2008) by geezerjay on Saturday May 11, 2019 @04:06AM (#19885146)
> how much does that actually affect your operation?

If it's a business service then the operation is not the end goal but the means to the end.

If it's a business service then the question you should be asking is "should I care that my competitors are able to observe and monitor my service metrics?".

Quite often, businesses do care a lot.