Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Information leakage since they have a timestamp component. Some people may not care, but plenty of folks do. As others have said, anything security related likely should UUIDv4. UUIDv7 is basically an engineering compromise on security (they leak a timestamp) vs performance (random reads and writes to an index aren’t as performant as localized reads and writes).


Thanks, I get it. Do you have any example where leaking a timestamp could pose a security risk? I can't think of any.


If it is public, any cases where for an entity, when it was created could be potentially sensitive information. E.g. some sort of legal documents, product, ecommerce data that could potentially reveal data to your competitors, etc.


Timing attacks?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: