News for hackers. Stuff that matters.
Re:You Don't Need UUID by Nullabillity on Monday September 11, 2023 @03:08PM (#37472173)
There is no fundamental tech advance that caa make the birthday paradox irrelevant or obsolete, and there never will be.
Re:You Don't Need UUID by rwiggum on Monday September 11, 2023 @10:08PM (#37476256)
all of cryptocurrency relies on sha256 the fact that the space is huge, and just ignores collisions. seems to work fine.
Re:You Don't Need UUID by Nullabillity on Tuesday September 12, 2023 @06:03AM (#37478868)
SHA-256 has, well, 256 bits of entropy. What I took issue with was the claim that UUID's 128 bits (well, almost, anyway) are overkill with modern advances in randomness.
Re:You Don't Need UUID by kiitos on Thursday September 14, 2023 @04:14PM (#37514246)
There have been so many incidents in crypto that exploited broken assumptions about hash collisions.

Factually, X != hash(X). Sometimes you can make the simplifying assumption that X == hash(X), but only in well-defined contexts, subject to proper risk analysis; never in general, or as a presumption of a system that needs to be correct.