Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-12-04 Thread Jens Alfke
> On Nov 30, 2017, at 6:52 AM, Stephen Chrzanowski wrote: > > I'm going to read it later, but, I'll be going in skeptical. Collision is > real, even at 128-bit resolution IIRC, to have a realistic chance of a collision you'd have to generate about √(2^128) UUIDs, which is 2^64, which about 2

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread J Decker
On Thu, Nov 30, 2017 at 11:52 AM, Keith Medcalf wrote: > > On Thursday, 30 November, 2017 09:27, J Decker wrote: > > >> UUIDs are nice though if you don't have a natural key available and > >> you are generating keys on multiple systems. Sadly, they are strings > >> in sqlite, and it would be m

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Keith Medcalf
On Thursday, 30 November, 2017 09:27, J Decker wrote: >> UUIDs are nice though if you don't have a natural key available and >> you are generating keys on multiple systems. Sadly, they are strings >> in sqlite, and it would be more efficient to store and compare them >> as their 128-bit repres

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Wout Mertens
Thanks, very insightful! On Thu, Nov 30, 2017 at 5:27 PM J Decker wrote: > I would also like to make a note, that many criticisms are 'there's so many > bytes to have to compare', however, because of the highly random nature of > good UUIDs failure occurs quickly, usually within 4 bytes, which m

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread J Decker
> > the builtin windows security such as looking up names and sids, checking > > whether the current process access token contains a given sid/name, > getting > > the current process access token username, computername, FQDN, and a few > > others. > > > > --- > > T

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Wout Mertens
For userIds, I generate a unique id from their email address. If they later change the email address, they keep the id anyway. I really like natural keys. Of course, if you want to use that id in URLs, it would be good to use a second unique id that is not used as a foreign key, so that people can

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Simon Slavin
On 30 Nov 2017, at 3:52pm, Stephen Chrzanowski wrote: > As one of the security guys here at work say, "Security does not help > convenience". In the debug world, yeah, I agree, looking for 4310 is much > easier than 8af7* but, that should stick to a debug environment. From the user/password s

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Stephen Chrzanowski
As one of the security guys here at work say, "Security does not help convenience". In the debug world, yeah, I agree, looking for 4310 is much easier than 8af7* but, that should stick to a debug environment. But to put a twist on this, and to lessen the paranoia of collisions, you could implemen

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Chris Locke
to:sqlite-users- > >> boun...@mailinglists.sqlite.org] On Behalf Of Simon Slavin > >> Sent: Thursday, 30 November, 2017 07:16 > >> To: SQLite mailing list > >> Subject: [sqlite] Article on AUTOINC vs. UUIDs > >> > >> Thought some of you might enjoy see

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Jay Kreibich
;> -Original Message- >> From: sqlite-users [mailto:sqlite-users- >> boun...@mailinglists.sqlite.org] On Behalf Of Simon Slavin >> Sent: Thursday, 30 November, 2017 07:16 >> To: SQLite mailing list >> Subject: [sqlite] Article on AUTOINC vs. UUIDs >> >

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Wout Mertens
ew > others. > > --- > The fact that there's a Highway to Hell but only a Stairway to Heaven says > a lot about anticipated traffic volume. > > > >-Original Message----- > >From: sqlite-users [mailto:sqlite-users- > >boun...@mailinglists.sqlite.org] On B

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Keith Medcalf
g] On Behalf Of Simon Slavin >Sent: Thursday, 30 November, 2017 07:16 >To: SQLite mailing list >Subject: [sqlite] Article on AUTOINC vs. UUIDs > >Thought some of you might enjoy seeing this article. I make no >comment on what I think of the reasoning therein. It’s set in t

Re: [sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Stephen Chrzanowski
I'm going to read it later, but, I'll be going in skeptical. Collision is real, even at 128-bit resolution, but if your code handles the potential of such a thing, then its no different than an autoinc primary key. I'm rather interested in their reasoning. On Thu, Nov 30, 2017 at 9:15 AM, Simon

[sqlite] Article on AUTOINC vs. UUIDs

2017-11-30 Thread Simon Slavin
Thought some of you might enjoy seeing this article. I make no comment on what I think of the reasoning therein. It’s set in the PostgreSQL world, but you could make an external function for SQLite which generates UUIDs.