UUID

Hello UUIDv7! / wikipedia

  • UUIDv1 is generally not recommended since it leaks MAC addresses - people have been pwn’d due to this. It’s not a theoretical problem.
    • Step 1: Generate UUIDs using a highly predictable pattern
    • Step 2: Use the UUID as a security key - like saving a private file at files.example.com/12345678-1234-5678-1234-123456781234/private-file.pdf
      • and assuming nobody will be able to download it without knowing the UUID
    • Step 3: Attacker predicts the UUID and downloads the private file.
Written on October 2, 2023, Last update on February 5, 2024
uuid security