Hacker News Reader

Thanks and I don't mind at all!

To be honest for the application I didn't want to expose a database serial (otherwise you'd know you're user #100, for example) or use UUIDs, so it's less about scale and more about obscuring ids. The library is well suited for huge scale scenarios nonetheless.

View on HN

Why did you not want to use UUID's?

I already use UUIDs for various fields and didn't want the id to be confused with other fields. More of a clarity/style decision than technical.

Unfortunately this means you get to make the same mistake as originally made with UUID: the static machine ID is a privacy leak.

Is it? Not sure private ips are so sensitive, esp. the lower parts.

If it’s unique it’s a privacy leak. I’m not going to debate that, it’s common knowledge.

UUID was changed in the 90s to be a hash of this instead and later to just be a completely random number because there are so many bits the likelihood of a single duplicate being generated before the sun has swollen enough to consume the earth is slim so you don’t actually need these schemes to provide a unique number.

Reply on news.ycombinator.com