Top all-time · #14734
Carnage's tech talk
Personal blog · carnage.github.iosecurityprogramming
Carnage's tech talk is a personal blog at carnage.github.io about security and programming. Since 2016, 5 different Hacker News readers have linked it 5 times, most often “Cryptanalysis of hashids (2015)”. The last post was in 2019, but the archive is still widely read.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link this blog's 2015 cryptanalysis of Hashids, citing it to argue that Hashids-encoded IDs are neither secret nor unguessable. The comments only cite it as support and do not judge the writing.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Cryptanalysis of hashids (2015)3 people · 3 mentions · first linked 2018-07-21
What Hacker News says?
I built something better that's actually secure and performant here: https://github.com/boogerlad/crypt-ids/ The issues with this are 1) as more IDs are generated, the probability of collision increases 2) a non integer primary key is slow For a single database instance, it's far more performant to leave it as an autoincrementing integer and when it needs to be exposed, encrypt it in the backend before sending it ou…
Comment linking /2015/08/cryptanalysis-of-hashids
on “Pg-shortkey: YouTube-Like Short IDs as Postgres Primary Keys”Submitted Cryptanalysis of hashids (2015) as a story · 25 points
HN discussionThe are not secret and not unguessable, they use some homegrown cipher, calling the result of encryption a "hash" for some reason ( http://carnage.github.io/2015/08/cryptanalysis-of-hashids/ )
Comment linking /2015/08/cryptanalysis-of-hashids/
on “Blog post id enumeration can lead to unwanted information disclosure”Submitted Cryptanalysis of Hashids (2015) as a story · 2 points
HN discussionSubmitted A critical analysis of Laravel as a story · 2 points
HN discussion