2 ms·
The "snake oil" here is that security by obscurity isn't a real thing. But it is, because otherwise the concepts of camouflage and out-of-sight, out-of-mind and
by southern_cross 8y ago
The "snake oil" here is that security by obscurity isn't a real thing. But it is, because otherwise the concepts of camouflage and out-of-sight, out-of-mind and secrecy in general simply wouldn't work. Only they do to a great extent!
One of the funniest things that I've read involved professional cryptologists examining files where steganography had supposedly been used. At the end of it all they confidently declared that there was simply nothing to be found there - no hidden, encrypted information. And I thought to myself "So you're saying that steganography really works, then!" :)
Like I said, I would choose non-standard techniques that no sane, trained cryptologist would probably even consider. (Ideally they would never even realize that there was anything there to potentially decrypt.) And then, in order to play it safe (and because I'm not an idiot), I would wrap my payload in an officially sanctioned encryption technique, maybe even more than one. Perhaps you missed those parts?
BTW, I would never "pitch" my system to anyone else, because then I would expose its existence. Nobody but me ever needs to know that it exists, much less that there is anything valuable being hidden by it.