Show HN: Givemeguid.com – CLI/curl friendly GUIDs
31–40 of 51 posts
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#32Earlier quoted context omitted.
Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()
In what world is it safe to rely on an external service to provide GUIDs for you? Where's the guarantee that the service won't one day start manipulating GUIDs? Now you have a major attack vector.
That seems hyperbolic to me. If you rely on UUID for security, it seems, to me, something is wrong in your architecture and the security flaw lies there.
When would you, legitimate, rely on GUID/UUID for security?
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#33I remember several years ago using https://newguid.com which was pretty much the same thing - no page furniture, just the new guid. Sadly the domain seems to be on sale now! There's also https://www.newguid.org/
Which is a perfect example why it is bad to rely on a service like this to generate your IDs.
What if I bought it and started emitting predictable IDs? Or non-unique IDs?
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#34Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#35Earlier quoted context omitted.
Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()
If a programmer isn't able to code a GUID generator and uses a HTTP request instead, he really shouldn't code.
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#36Earlier quoted context omitted.
In what world is it safe to rely on an external service to provide GUIDs for you? Where's the guarantee that the service won't one day start manipulating GUIDs? Now you have a major attack vector.
> major attack vector That seems hyperbolic to me. If you rely on UUID for security , it seems, to me, something is wrong in your architecture and the security flaw lies there. When would you, legitimate, rely on GUID/UUID for security?
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#37Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#38Or from PowerShell: [Guid]::NewGuid()
Re: Show HN: Givemeguid.com – CLI/curl friendly GUIDs
#39I'm having trouble imagining who would want to use this. What's the environment where you would have curl and a need for generating UUIDs, but wouldn't have access to uuidgen or similar?
Maybe a JS App which is made completely out of third party APIs, without anything self-hosted? Not discussing wether this is a good idea or not, though... I was surprised to see that there is no "built-in" mechanism in JS to generate a GUID. As a C# dev, I'm used to Guid.NewGuid()