The space of possible reasonable URLs is way too big to brute force. If your point is that someone can just grab the set of existing HN URLs and get their heashes, then I don't see what this achieves. Someone who knows the URLs can just download all the comments for them anyway. In other words, is there an example where a sophisticated state of the art hash has advantage over MD5 in our case?