
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
uuid-readable
Advanced tools
Easy to Remember, Readable UUIDs, that are Shakespearean gramatically correct sentences 🥳
Generate Easy to Remember, Readable UUIDs, that are Shakespearean and Grammatically Correct Sentences 🥳
Loren Chariot Addy the Titbit of Cholame questioned Cele Garth Alda and 16 windy frogs
Drucill Hubert Lewse the Comer of Avera rejoices Fiann Craggy Florie and 5 hard trouts
Jacquette Brandt John the Pectus of Barnsdall doubted Glenn Gay Gregg and 12 noisy stoats
11 pretty dragonflies regularly sang 2 fat toads happily buzzed
Think of it this way, it's impossible to remember 32 random characters in UUID, but these sentences even though hard can be remembered, and are definitely fun!
Alternatively, generate 32 bit readable small sentences from 128 bit UUID and check later if they match.
Thanks to uuid.rocks, we have an API Endpoint
curl https://uuid.rocks/plain?readable
# Joyce Ange Barrett the Orient of Alco killed Marlyn Hewett Lady and 11 strong bulls
npm install uuid-readable --save
const id = require('uuid-readable')
console.log( id.generate() )
// Cathleen d Dieball the Monolith of Alderson reflects Arly Arnie Keenan and 18 large ants
Pass your own UUID
console.log( id.generate(uuid) )
Inverse, get UUID back from Readable UUID
const uuid = '1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed'
const readable = id.generate(uuid)
const inverse = id.inverse(readable)
inverse === uuid // true
Low Entropy 32bit Readable (Use as Readable Hash)
const short = id.short(uuid)
// 5 fat toads happily buzzed
// Check Later
id.check(short, uuid) //true
MongoDB
const id = require('uuid-readable')
readable_id: {
'type': String,
'default': id
}
// or use as real id
_id: {
'type': String,
'default': id
}
UUID is converted to 128 bits.
For example, 7 bits for animal means we choose one animal from a list of atleast 2**7 = 128
animals
Alternatively, the inverse funcation proves that UUID and Readable UUID form a bijection, hence no loss of entropy.
You can remember parts of the id and that's enough to search it up and communicate throughout a large team. I will be using it as a secret generation for a service, and customer tickets.
FAQs
Easy to Remember, Readable UUIDs, that are Shakespearean gramatically correct sentences 🥳
We found that uuid-readable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.