Can you guess someone else's account id or sort of brute force to find valid ids and then run malicious searches against them?
Seems like a security risk.
Seems like a security risk.
If so it's like 16 digits. Isn't that 10^16 values? If they had 1 million users, that's still a lot of numbers to test before you find 1 valid one :)
I suck at math, but that's like 999999999 non-existing accounts per valid account? (10^16 - 10^6 - 1)