3 ms·
Can anything without a "please don't hack" sign considered defense in depth? Probably not, hence an appropriate first patch.
by user5994461 8y ago
Can anything without a "please don't hack" sign considered defense in depth?
Probably not, hence an appropriate first patch.
- Dylan16807 8y agoYes it can. If you see a product that claims to be secure, with multiple layers of security, certain exceptionally-fragile measures should decrease how much you believe that claim. Layers of security have to at least be mildly effective to count as layers. If you're fighting an active attack you can stall by filtering on some arbitrary parameter unrelated to the actual problem. For anything that's supposed to last more than an hour, it's worse than useless. It makes your system more complex for no security benefit. An idea like that should never make it into a product release.