UUID
- UUIDv1 is generally not recommended since it leaks MAC addresses - people have been pwn’d due to this. It’s not a theoretical problem.
- Step 1: Generate UUIDs using a highly predictable pattern
- Step 2: Use the UUID as a security key - like saving a private file at files.example.com/12345678-1234-5678-1234-123456781234/private-file.pdf
- and assuming nobody will be able to download it without knowing the UUID
- Step 3: Attacker predicts the UUID and downloads the private file.
Written on October 2, 2023, Last update on February 5, 2024
uuid
security