Hacker News new | ask | show | jobs
by Dylan16807 195 days ago
It depends on stuff.

Sometimes a URL can have a password in it.

But when it's just a sequential-ish ID number, you have to accept that people will change the ID number. If you want security, do something else. No prosecuting.