you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 years ago (1 child)

I am surprised that they don’t provide UUIDv4’s, feels like what they provide is somewhat guessable

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 3 years ago* (1 child)

    https://mullvad.net/en/blog/2017/6/20/mullvads-account-numbers-get-longer-and-safer/

    As they outline here, there are ~9 quadrillion possible keys, needing around 5.5 million guesses to find an account. I think they hit a nice middleground between decent entropy and still having a number you can memorize (like a credit card).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 years ago (1 child)

    people memorize their credit card numbers?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 3 years ago (1 child)

    Nowadays, not so much. In the previous decades before password managers, card vaulting, apple pay and so on: yes, if you were typing it in or writing it on forms frequently, it wasn't uncommon to just memorize it.

    My point though was that there is a limit to our ability to remember long and random alphanumeric strings, and I find credit card numbers to be that limit. UUIDs are longer and have a much bigger character set.

  • source
  • parent
  • hideshow 2 child comments