Live data from Hacker News

Show HN: Givemeguid.com – CLI/curl friendly GUIDs

givemeguid.com

31–40 of 51 posts

Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs

#32

Earlier quoted context omitted.

Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()

In what world is it safe to rely on an external service to provide GUIDs for you? Where's the guarantee that the service won't one day start manipulating GUIDs? Now you have a major attack vector.

> major attack vector

That seems hyperbolic to me. If you rely on UUID for security, it seems, to me, something is wrong in your architecture and the security flaw lies there.

When would you, legitimate, rely on GUID/UUID for security?

Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs

#33

I remember several years ago using https://newguid.com which was pretty much the same thing - no page furniture, just the new guid. Sadly the domain seems to be on sale now! There's also https://www.newguid.org/

> Sadly the domain seems to be on sale now!

Which is a perfect example why it is bad to rely on a service like this to generate your IDs.

What if I bought it and started emitting predictable IDs? Or non-unique IDs?

Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs

#35

Earlier quoted context omitted.

Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()

If a programmer isn't able to code a GUID generator and uses a HTTP request instead, he really shouldn't code.

Depends on the GUID. Some of them include version numbers, timestamps etc... I would need to code the http request too. The problem with web services is that they might disappear again, so I would maybe use it on a website, but not for production software.

Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs

#36
post #32

Earlier quoted context omitted.

In what world is it safe to rely on an external service to provide GUIDs for you? Where's the guarantee that the service won't one day start manipulating GUIDs? Now you have a major attack vector.

> major attack vector That seems hyperbolic to me. If you rely on UUID for security , it seems, to me, something is wrong in your architecture and the security flaw lies there. When would you, legitimate, rely on GUID/UUID for security?

You can use the UUID v4 as a secret I guess.

Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs

#39
post #3

I'm having trouble imagining who would want to use this. What's the environment where you would have curl and a need for generating UUIDs, but wouldn't have access to uuidgen or similar?

Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()

[deleted]
Post reply on HN