Open Stack

On 2018-06-27 12:37:43 -0400 (-0400), Jay Pipes wrote:
[...]
> the hostId was not, in fact, the host identifier, but rather a
> SHA-224 hash of the host and project_id.
[...]

Oh, that's slick. Yeah, it would basically take brute-forcing the
UUID space to divine the actual host identifier from that (you could
use it to confirm a known identifier, but not easily discover it). I
too am not concerned about security in light of this, though it does
open the door to users doing things like booting and deleting
instances until they get one scheduled to a compute node they like
(for whatever reason, be it affinity, anti-affinity, et cetera).
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180627/18c5ca07/attachment.sig>