Little Man In My Head personal blog
UUIDs generally do not meet security requirements
Some time ago, I was doing a web application penetration test, and noticed that the authentication tokens were UUIDs. This I knew was risky, and in fact if you read the UUID rfc, section 6 of it wa…
- Points
- 130
- HN comments
- 62
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2015
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Nov 26, 2015 | UUIDs generally do not meet security requirements by xnyhps | 130 | 62 |
