News for hackers. Stuff that matters.

A comment on First American Financial Corp. Leaked Hundreds of Millions of Insurance Records. Parent comment

Re:First American Financial Corp. Leaked Hundreds of Million... by tptacek on Friday May 24, 2019 @08:23PM (#20006354)
Is MSSQL's NEWSEQUENTIALID secure? I didn't think it was.
[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by kasey_junk on Friday May 24, 2019 @09:35PM (#20006601)
Is the point of non mono tonic is schemes to make them -secure- secure?

I thought they were a bit of a hack to raise the bar a touch. In which case the crypto security properties of that function isn’t interesting. Instead the ergonomics are.

[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by tptacek on Friday May 24, 2019 @10:06PM (#20006684)
No, the cryptographic security of the identifier matters a lot. A GUID generated from an insecure PRNG can be used to predict other GUIDs. A UUID generated from 16 bytes of /dev/urandom can't be used to get anything but the object to which it refers.
[ Parent | on HN ]