Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Randomize Decision IDs to improve robustness #38

Open
ge0rg opened this issue Dec 15, 2014 · 0 comments
Open

Randomize Decision IDs to improve robustness #38

ge0rg opened this issue Dec 15, 2014 · 0 comments

Comments

@ge0rg
Copy link
Owner

ge0rg commented Dec 15, 2014

Currently, MTM is using auto-increment integers for individual decisions. If an attacker gains a mechanism to inject decisions into MTM, he could easily enumerate the most probable IDs and cause a server to be trusted that should not.

A fix would be to change auto-incremented integers to UUID.randomUUID().
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ge0rg