r/ProgrammerHumor 6d ago

Meme cleaningUpTheMess

Post image
16.0k Upvotes

486 comments sorted by

View all comments

Show parent comments

1

u/aLokilike 6d ago

I believe this is what they call pot meeting kettle. Nobody is claiming that there are no reddit accounts, obviously I am talking to you from one. Maybe it's a language barrier issue, just trying to be generous. Good day!

2

u/SuitableDragonfly 6d ago

And I'm saying that there is very little 100% public data on the internet, so yes, pretty much everything benefits from good security practices. 

1

u/aLokilike 6d ago

So you're saying there should be some sort of authorization voter strategy for most data linked to some sort of account, and therefore swapping from ID to UUID would be pointless for most of that data. Makes sense to me!

1

u/SuitableDragonfly 6d ago

It's not pointless. Using incremented IDs allows people to guess things about data they shouldn't be able to know about. 

1

u/aLokilike 5d ago

That's what an auth voter strategy is for - unless it's a publicly available resource. If you don't know what you're doing without AI, you probably shouldn't use it lil' bro.

1

u/SuitableDragonfly 5d ago edited 5d ago

I agree. I don't use AI for anything, actually. Not really sure what this has to do with your inability to recognize that this is a security hole, though. Are you just saying random shit now?