News for hackers. Stuff that matters.

A comment on Short, friendly base32 slugs from timestamps. Parent comment

Re:Short, friendly base32 slugs from timestamps by vore on Thursday January 19, 2023 @04:50AM (#34438488)
I've never been sure of the use case of hashids. They're not really a security measure since they can be easily defeated; you might as well just expose the sequential ID at that point. If you do need something with better properties, you should probably be using UUIDv6.
[ Parent | on HN ]
Re:Short, friendly base32 slugs from timestamps by junon on Thursday January 19, 2023 @05:13AM (#34438663)
> they can be easily defeated

How? I mean they're of course no cryptographic measure but with the salt you have some secrecy.

[ Parent | on HN ]
Re:Short, friendly base32 slugs from timestamps by paulgb on Thursday January 19, 2023 @06:17AM (#34439106)
If an attacker can generate sequential hashids, they can decipher the alphabet order that hashids use without needing to know the seed, and then use the seed to invert other hashids.

I wrote a library that generates short IDs with the goal of making the similarity between two codes have nothing to do with sequence order.

https://docs.rs/block-id/latest/block_id/

[ Parent | on HN ]