Toxic Tokens: Using UUIDs for Authorization Is Dangerous
research.nccgroup.com