General consensus on using database ids in urls?

Is using database ids in urls (e.g. http://ift.tt/1UmxDFt) an acceptable practice or should it be avoided? Is it more vulnerable to security threats by exposing it?