Skip to content

Comment on Prevent information leaking in Railsparent

Comments

Putting the database row ID in urls, which is the Rails default, basically lets a competitor plot your growth with a simple script.

Which is only a 'problem' (we'll assume there's 1:1 between DB rows and growth) with incrementing column IDs. UUIDv4's or some other random ID (24-bit base64, composite IDs with a shard prefix, etc) don't have this problem.

or slugs.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.