Comment by eaf7e281 | Hacker News Reader

Top New Best Ask Show Jobs

Comment by eaf7e281 | Hacker News Reader

Parent Full thread

> leak state (e.g. UUIDv7)

But according to PostgreSQL, UUIDv7 provides better performance in the database, so is this essentially a trade off between security and speed?

Yes, because UUIDv7 gives up some random bits in order to include the timestamp, which is done in a way that makes UUIDv7s quick to sort by timestamp.

How does including the timestamp expose me to adversarial exploitation?

It reveals the time you created the UUID, for one. That can lead to a bunch of problems.

I’ve not come across any.

The same way using an auto increment integer ID does, but imagine that integer also leaked your created timestamp column too.

Reply on news.ycombinator.com