3 ms·
Good security doesn't require obscurity.
by weego 9y ago
Good security doesn't require obscurity.
- 1ba9115454 9y agoGood security means defence in depth. You secure everything including your backend implementation details.
- yarrel 9y agoGood security means not kidding ourselves that backend implementation details are providing us with any defense. They're not, and if we base our security strategy on the assumption that they are then we have at least one weakness in that strategy.
- cat199 9y agowhat then is an 'information disclosure vulnerability'?
- Artemis2 9y agoIt’s not what you think. It’s more about disclosing business-related data or metadata (e.g. customer names, last time a customer logged in) than technical information (e.g. internal service names, minor debug information).