Comment by dtf | Hacker News Reader

Top New Best Ask Show Jobs

Comment by dtf | Hacker News Reader

Parent Full thread

Because they leak details about the user's machine?

True of UUID1s, unless you bastardize them and use something other than MAC address. You could do UUID4s without leaking info.

Those are just random numbers, back to square 1.

Then you loop back to needing a quality PRNG, which is exactly TFA's issue.

UUID4 requires a good CSPRNG. Random isn't magic, you have to do the work.

It seems as though these IDs are generated on the server. Leaking the MAC address of the server seems inconsequential to me.

Leaking the MAC address of the user's machine is also inconsequential.

Reply on news.ycombinator.com