3 ms·
> I understand that you need to stay on top of the problem of people gaming the system, and that being too open just makes it easier for people to screw around
by RyanMcGreal 17y ago
> I understand that you need to stay on top of the problem of people gaming the system, and that being too open just makes it easier for people to screw around and make the voting system less valuable.
Is security through obscurity really a good idea in this day and age?
- romland 17y agoWorks for Google and their pagerank. And I would argue that in that case it IS a good idea. :)
- wizard_2 17y agoIts another brick in the wall. As long as you're not fooling yourself into thinking it's all you need, it aids in not making things easier for people to figure out and slightly raises the bar against intrusion. "Defense in Depth" is the only situation where I could consider obscurity a security layer. Just because I keep my ssh servers up to date (disable passwords, root login, etc), doesn't mean I don't gain anything by having them listen a high port. The moment a 0-Day exploit is found (or maybe another Debian key generation bug) the security of not showing up on every script kiddies initial scans looking for unpatched ssh servers is worth something.