← Back to context

Comment by nomilk

1 year ago

I think this is a joke, but I think it is a problem if someone finds any sensitive uuid here, because the list on this website is a tiny subset of all possible uuids, so it provides a useful rainbow table for anyone attempting brute force attacks. I.e. generating and using random uuids would have an astronomically small success rate, whereas trying the ones on this site may not (depending on where they came from, which I'm not sure of).

You should check out the author's blog post about the site — it is quite literally every UUID, computed and rendered on demand.

https://eieio.games/blog/writing-down-every-uuid/

  • Oh.. ha, gotcha. Thanks for explaining. Incidentally, glad uuid's computed on the fly (as opposed to pre-computed) as I think the site would require a very (impossibly?) large database.

    • If it weren't impossible to store 2^122 128 bit values, things would look pretty dire for most cryptographic algorithms we use.

> depending on where they came from, which I'm not sure of

They're coming straight out of your processor :)

Careful where you scroll: Your password and your crypto wallet recovery phrase are in there somewhere too! (Unless you have one of those fancy 24 word long ones.)

All possible UUIDs are in this page, it’s not a tiny subset.

They are generated by your device on the fly as you move through the list so you can’t really use it as a rainbow table any more than manually creating the table yourself.