61–70 of 81 posts
Earlier quoted context omitted.
UUIDv4 may or may not use a cryptographically secure random number generator. Python's UUID library, for example, falls back to the insecure 'random' module. Given a handful of outputs, it's possible to predict future ones.
Uh... Come again? def uuid4(): """Generate a random UUID.""" return UUID(bytes=os.urandom(16), version=4) https://github.com/python/cpython/blob/3.13/Lib/uuid.py
Earlier quoted context omitted.
The UI is atrocious. I do computers for a living and can barely navigate and figure out what’s going on.
I noticed it freezes up on me sometimes when I open it. I assume something is blocking instead of being asynchronous when it pings their servers, but instead of waiting to dismiss a loading screen it just shows the full app and like freezes.
Wait, 64 million applicants, not applications? That's like 20% of the US population!
Others have said it's for the global site, but would 64 million really be that off for the US? I just looked it up 13 of the 40k francises are in the US. Assuming linearity, thats about 21 million US applicants since they started keeping centralized, digital records. 20% of Americans younger than 40 is not a bad guess.
Earlier quoted context omitted.
The McDonalds consumer-facing app is quite possibly the worst app from a major company I've ever encountered. It's shockingly bad.
It can be confusing for new or infrequent users. I use it once a week and I don't find it annoying at all, except for the bug where it will let you complete an order for an airport McDonald's, and then soon after automatically cancel the order.
I can place an order in the Chick-fil-A app in about 10-20 seconds. Quick and easy.
A similar order in the McDonalds app throws up ads, unskippable animations in time sensitive spots, unresponsive or jumpy UI elements, popup alerts several times, unnecessary steps (like how the fries category has one item, but it still shows you the list view), etc.
I’ve wound up parked in the lot cursing at the app a number of times as I tap through obstacles.
Earlier quoted context omitted.
It can be confusing for new or infrequent users. I use it once a week and I don't find it annoying at all, except for the bug where it will let you complete an order for an airport McDonald's, and then soon after automatically cancel the order.
It’s not a matter of familiarity. I can place an order in the Chick-fil-A app in about 10-20 seconds. Quick and easy. A similar order in the McDonalds app throws up ads, unskippable animations in time sensitive spots, unresponsive or jumpy UI elements, popup alerts several times, unnecessary steps (like how the fries category has one item, but it still shows you the list view), etc. I’ve wound up parked in the lot cu…
Earlier quoted context omitted.
Why does one even need an app for a fast food restaurant?
1. You can exchange privacy for 20% off. 2. Many franchises have a crummy PA system, so you can avoid this if you plan on using the drive-through. 3. Customization. It's very tedious for all involved to repeatedly request "no cheese", "no ice", "extra sauce", etc. for a very large (e.g., $100+) order.
Never happens with apps.
Earlier quoted context omitted.
Ok, this is probably a stupid, very bad, no good idea considering I've not heard of people doing this, but can't you retain many of the benefits of numerical IDs but also the secrecy of UUIDs by using an HMAC ? With HMAC, you can still ask for some sequential IDs SipHash128(0, KEY) = k_0 SipHash128(1, KEY) = k_1 You get the same number of bits as a UUID. You can't, however, sort by IDs to get their insertion sequence…
You could also "just" have an internal-use only numeric ID, or use a UUIDv7.
My favourite part form the original report was that paradox had no way to find their security team ( to contact) and their security page just had "We worry about security, so you don't have to." https://web.archive.org/web/20250208000940/https://www.parad...