
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
I've often found myself needing to have a per-machine unique identifier, but actually getting one of these is harder than it should be. You can't just use the MAC address, since those aren't guaranteed to be unique, especially when you're working with a batch of cheap embedded devices. While not rocket science, it's also not trivial to get the MAC address of a box sometimes: which interface to use? What if you change network cards? What if you have to spoof a MAC address? POSIX specifies gethostid(1), but on Linux the man page notes under "Bugs" that "It is impossible to ensure that the identifier is globally unique." Indeed, my laptop and my work computer have the same hostid value.
snowflake_uuid is a trivial wrapper around Python's uuid library to create a persistent, per-machine UUID (called a 'snowflake', not to be confused with the data warehousing project) and give you a nice API to mess with it. Usage is simple:
>>> import snowflake_uuid
>>> snowflake_uuid.snowflake()
'7232c1c3-f6d1-4aec-bedd-c7e4c10dc8d3'
There's also a script that can be run from the command line:
$ snowflake
7232c1c3-f6d1-4aec-bedd-c7e4c10dc8d3
To generate a machine's snowflake ID, just install snowflake:
$ pip install snowflake_uuid
Or from source:
$ python setup.py install
The machine's snowflake is saved in /etc/snowflake during installation. Any user can read this file, but only users with root access can modify it. You can also generate other snowflakes in other locations, so each user (or application) can make their own snowflakes.
Of course, you can do all this in Python too:
>>> import snowflake_uuid
>>> snowflake_uuid.make_snowflake(snowflake_file='foo')
ee2b1891-ccd3-4a23-9246-4ce40d20e740
>>> snowflake_uuid.snowflake(snowflake_file='foo')
ee2b1891-ccd3-4a23-9246-4ce40d20e740
FAQs
Simple persistent unique IDs.
We found that snowflake-uuid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.