Hacker News new | ask | show | jobs
by davisp 715 days ago
Information leakage since they have a timestamp component. Some people may not care, but plenty of folks do. As others have said, anything security related likely should UUIDv4. UUIDv7 is basically an engineering compromise on security (they leak a timestamp) vs performance (random reads and writes to an index aren’t as performant as localized reads and writes).
1 comments

Thanks, I get it. Do you have any example where leaking a timestamp could pose a security risk? I can't think of any.
If it is public, any cases where for an entity, when it was created could be potentially sensitive information. E.g. some sort of legal documents, product, ecommerce data that could potentially reveal data to your competitors, etc.
Timing attacks?