News for hackers. Stuff that matters.
Re:Every UUID Dot Com by nomilk on Friday December 06, 2024 @08:20PM (#42346393)
I think this is a joke, but I think it is a problem if someone finds any sensitive uuid here, because the list on this website is a tiny subset of all possible uuids, so it provides a useful rainbow table for anyone attempting brute force attacks. I.e. generating and using random uuids would have an astronomically small success rate, whereas trying the ones on this site may not (depending on where they came from, which I'm not sure of).
Re:Every UUID Dot Com by kbhomes on Friday December 06, 2024 @08:41PM (#42346514)
You should check out the author's blog post about the site — it is quite literally every UUID, computed and rendered on demand.

https://eieio.games/blog/writing-down-every-uuid/

Re:Every UUID Dot Com by nomilk on Friday December 06, 2024 @09:29PM (#42346761)
Oh.. ha, gotcha. Thanks for explaining. Incidentally, glad uuid's computed on the fly (as opposed to pre-computed) as I think the site would require a very (impossibly?) large database.
Re:Every UUID Dot Com by lxgr on Friday December 06, 2024 @09:33PM (#42346772)
If it weren't impossible to store 2^122 128 bit values, things would look pretty dire for most cryptographic algorithms we use.
Re:Every UUID Dot Com by lxgr on Friday December 06, 2024 @09:31PM (#42346767)
> depending on where they came from, which I'm not sure of

They're coming straight out of your processor :)

Careful where you scroll: Your password and your crypto wallet recovery phrase are in there somewhere too! (Unless you have one of those fancy 24 word long ones.)

Re:Every UUID Dot Com by maronato on Friday December 06, 2024 @09:06PM (#42346652)
All possible UUIDs are in this page, it’s not a tiny subset.

They are generated by your device on the fly as you move through the list so you can’t really use it as a rainbow table any more than manually creating the table yourself.