How good is security via hashing

[Paul Rubin]

geremy condra <debatem1 at gmail.com> writes:
> # adds random junk to the filename- should make it hard to guess
> rrr = os.urandom(16)
> fname += base64.b64encode(rrr)

Don't use b64 output in a filename -- it can have slashes in it!  :-(

Simplest is to use old fashioned hexadeimal for stuff like that, unless
the number of chars is a significant problem.  Go for a more complicated
encoding if you must.