News for hackers. Stuff that matters.
Re:Show HN: A LaTeX-based resume building app by soccer3056 on Wednesday June 12, 2019 @07:40AM (#20163545)
Thanks for letting me know Have taken the site down until this is fixed
Re:Show HN: A LaTeX-based resume building app by Findeton on Wednesday June 12, 2019 @08:03AM (#20163656)
Just use UUIDs
Re:Show HN: A LaTeX-based resume building app by jjjbokma on Wednesday June 12, 2019 @08:10AM (#20163700)
> Do not assume that UUIDs are hard to guess; they should not be used as security capabilities

https://news.ycombinator.com/item?id=10631806

Re:Show HN: A LaTeX-based resume building app by snazz on Wednesday June 12, 2019 @08:30AM (#20163837)
Use a crypto-quality PRNG (/dev/urandom is fine) and you should be fine, especially since the time it takes to brute-force URL parameters is very high (network latency). Just about anything is better than sequential numbers here.
Re:Show HN: A LaTeX-based resume building app by codingdave on Wednesday June 12, 2019 @10:02AM (#20164715)
They are harder to guess than sequential numbers.

No security is perfect - it is all deterrence. Using UUIDs instead of numbers at least closes the front door, even it it isn't locked.

Re:Show HN: A LaTeX-based resume building app by Xelbair on Wednesday June 12, 2019 @08:06AM (#20163673)
Guids instead of numbers should suffice as quick and dirty fix :)