Hacker News new | ask | show | jobs
by kyberias 2886 days ago
You rely on hashids to be secure, so that your jerk end-users can't increment the id. You would like to know how secure it actually is, don't you?
2 comments

This is exactly what I'm wondering. If an attacker finds a way to reverse the hashids, then he can increment the ID and scan the resources.
No.

If they can figure that out, I will have bigger problems with the users.

So apparently you have bigger problems with the users now.