News for hackers. Stuff that matters.
Re:Obfuscate Your Company by eli on Friday May 29, 2009 @11:50PM (#633233)
md5(rand())) doesn't really make much sense. It's slightly less random than just using rand().
Re:Obfuscate Your Company by babo on Saturday May 30, 2009 @12:38PM (#633826)
But it has a constant length and hides randomness from the observer.
Re:Obfuscate Your Company by eli on Sunday May 31, 2009 @01:12AM (#634454)
"Hide randomness" ?
Re:Obfuscate Your Company by babo on Sunday May 31, 2009 @12:56PM (#634844)
From hashes you'll recognize the fingerprint of the hash function but not the underlying data. Here is an example of random UIDs, generating a few user's in a row and it's obvious that it's random: random.sample(xrange(10000), 10) [88, 3833, 6353, 8113, 8983, 4280, 7878, 3050, 9409, 404]
Re:Obfuscate Your Company by eli on Sunday May 31, 2009 @07:51PM (#635198)
So?

And if you generated random IDs with the same number of bits as a hash function they would be indistinguishable.

Re:Obfuscate Your Company by Jakob on Saturday May 30, 2009 @06:33AM (#633498)
The code in the article comes from the example of this page http://www.php.net/manual/en/function.uniqid.php which has an interesting comments section on unique ids.