4 ms·
My biggest concern with security through obscurity is that it begins to be relied upon as a significant defensive mechanism. the incredible rate at which I see
by wepple 10y ago
My biggest concern with security through obscurity is that it begins to be relied upon as a significant defensive mechanism.
the incredible rate at which I see "but we have X" as a reason not to do good security is depressing.
- mikeash 10y agoI totally agree with that. If you do this kind of thing, you have to be absolutely sure that it's never used as an excuse for not having actual security.
- PeterisP 10y agoJust came in from grading a bunch of student-made systems. Several of them were proud of having their passwords secured in the database - by storing unsalted SHA1 or MD5 hashes. It's like going through a checklist of desired features, finding "security" on it and doing any single half-assed thing to check that box.