Live data from Hacker News

Every V4 UUID

everyuuid.com

151–160 of 381 posts

Re: Every V4 UUID

#151

Earlier quoted context omitted.

PINs can be up to 6 digits (at least here in the UK, but I doubt it's country specific), even though the ones they give you by default are only ever 4. So that's only a leak of 1% of them.

It helps, but only temporary. I wouldn't be surprised if all 6 digit PINs will be leaked within a few decades.

No with the rate of development of quantum computers that estimate is down to the next few years.

Re: Every V4 UUID

#153
post #121

The fact that the search works impressed me more than anything. Of course, like every great magic trick, it seems so simple once it is explained. For the curious, here's the linked blog post describing how the project works: https://eieio.games/blog/writing-down-every-uuid/ Edit to add: I'd only tried searching for an exact UUID when I wrote this comment. I didn't realize it supports full text search! Now I'm even mo…

A great example of Teller's observation that "sometimes magic is just someone spending more time on something than anyone else might reasonably expect."

> Ninety per cent of most magic merely consists of knowing one extra fact.

-- Night Watch by Terry Pratchett

Re: Every V4 UUID

#154
post #114

The fact that the search works impressed me more than anything. Of course, like every great magic trick, it seems so simple once it is explained. For the curious, here's the linked blog post describing how the project works: https://eieio.games/blog/writing-down-every-uuid/ Edit to add: I'd only tried searching for an exact UUID when I wrote this comment. I didn't realize it supports full text search! Now I'm even mo…

The full text search is a little confusing because it doesn't actually search them in order, though it appears to at first. And if you click "next" a few times and then "prev" the same number of times, you don't necessarily end up back at the same UUID you were at before. It's a neat-seeming trick though.

It’s an interesting question whether that could be fixed. I think the answer is Yes. If the author didn’t do any scrambling, and just displayed UUIDs in numeric order, then it’s trivial to enumerate search results in order. Likewise, if you do something like adding a constant mod 16 to each hex digit, you could do the same thing when you generate UUIDs matching a substring. So the question becomes whether you could find something like that that gives a sufficiently convincing illusion of entropy but is still reversibile when you hold a subset of the digits constant. And it seems like it should be.

Re: Every V4 UUID

#155
post #78
post #75

Earlier quoted context omitted.

This is the biggest hack since every ATM PIN was leaked: https://pastebin.com/SmJRB8eQ

Holy shit, my PIN is on there. How the hell did that get that?? I was told it was a 1/10,000 chance of someone guessing it.

Don't worry, I already checked your account and there wasn't anything there to take.

Re: Every V4 UUID

#156
post #75
post #17

Seems like some hacker leaked all UUIDs. Check if your UUIDs are part of the leak.

This is the biggest hack since every ATM PIN was leaked: https://pastebin.com/SmJRB8eQ

Haha, I have a file in my home directory that has every possible SSN because I wanted to be able to tell a friend “I have your SSN in a file on my computer.”

Re: Every V4 UUID

#157
post #114

Earlier quoted context omitted.

The full text search is a little confusing because it doesn't actually search them in order, though it appears to at first. And if you click "next" a few times and then "prev" the same number of times, you don't necessarily end up back at the same UUID you were at before. It's a neat-seeming trick though.

It’s an interesting question whether that could be fixed. I think the answer is Yes. If the author didn’t do any scrambling, and just displayed UUIDs in numeric order, then it’s trivial to enumerate search results in order. Likewise, if you do something like adding a constant mod 16 to each hex digit, you could do the same thing when you generate UUIDs matching a substring. So the question becomes whether you could f…

FWIW I am super interested in this question but feel like I don't know how to derive a satisfying answer, maybe because the one of my goals here (add "enough" entropy) is a real fuzzy "I know it when I see it" sort of thing.

But I'm gonna try to get a few more crypto-knowledgeable friends to chat with me about this and write up what I learn!

Re: Every V4 UUID

#158
post #27

Sometimes I feel bad when I generate a UUID without using it for anything. Like I've wasted it.

At work our clickstream data carries an 'event_uuid' column which combines uuid, bigint, account numbers and about 10 other identifiers. It makes joining really convenient when you don't know what column to use.

Re: Every V4 UUID

#159
post #142
post #69

Earlier quoted context omitted.

I'm really happy that the trick was magical to you - I was so surprised and delighted when I realized that this was possible, and I wasn't really sure if anyone else would feel the same way! And of course, I'm proud to be providing so much utility here - finally we can find and use UUIDs tailor-fit to our needs

Memorable UUIDs? I think you're on to something here! (Also, dibs on 00000000-0000-4321-abcd-000000000001!)

We can just make an NFT of each one to make sure they stay unique too!

Re: Every V4 UUID

#160
post #124

I'd like to announce my new `npm` package called `get-uuid`. Behind the scenes, it loads `everyuuid.com`, picks a random row number, and returns that UUID.

Please, only try to break the library's api 5 times a month, otherwise it's just too much

And look forward to my realising your package doesn't quite do want I want and forking it

Post reply on HN