IDORs with unpredictable IDs are valid vulnerabilities

Joseph Thacker argues IDORs remain valid vulnerabilities even when IDs are unpredictable UUIDs, listing practical ways attackers obtain them: Wayback Machine, AlienVault OTX and URLScan archives, shared documents, referrer leaks and more.