News for hackers. Stuff that matters.
Re:Things you should do now (2011) by vsareto on Friday February 19, 2021 @09:15AM (#26193351)
This is really an ancillary benefit and not a real solution to enumeration vulnerabilities. The concern is usually over sharding the data, unique ID generation guarantees, and performance. You shouldn't really be deciding UUID vs. Int based on the possibility for ID enumeration. It's almost certainly easier to come up with a solution to slow/prevent enumeration than move from Ints to UUID.
Re:Things you should do now (2011) by mewpmewp2 on Friday February 19, 2021 @12:34PM (#26195539)
There's also leaking financial, business data. E.g you create an order and you see your order id being 3000 the first day and 4000 the next, so then you'll be able to guess how many orders this company has etc.
Re:Things you should do now (2011) by tjalfi on Friday February 19, 2021 @02:19PM (#26196861)
This is called the German Tank Problem[0].

[0] https://en.wikipedia.org/wiki/German_tank_problem