linkedin/indextank-service — Issue #1: api_key generation salt disclosed
Author: poulejapon
Created: 2011-12-22 14:36:09+00:00
State: open

I think your api_key generation salt should be within a config file. If ids get public, I think a bruteforce attack might be possible.

I didn't have time to study more the code, so I'm sorry if I got something wrong here.