3 ms·
True, but history has demonstrated countless times that closed source code doesn't provide near enough obscurity to deter hackers, and automated fuzzing tools m
by nitrogen 10y ago
True, but history has demonstrated countless times that closed source code doesn't provide near enough obscurity to deter hackers, and automated fuzzing tools make it even easier.
- TickleSteve 10y agoOf course, obscurity on its own is not a defence. its one part of a whole system, and in that, if it does delay or deter (even slightly) then it has worked.
- rimantas 10y agoAnd as shown by OpenSSH being open source does not help much in the security department either.
- TeMPOraL 10y agoIt also demonstrates that obscurity can significantly reduce the number of attack attempts that are made against you. See e.g. why people move SSH to non-standard ports - raising the entry bar for the attackers has some value.