3 ms·
This saying rubs me the wrong way, because confidentiality is 1/3 of security. Obscurity is critical or this wouldn't be a vulnerability.
by andrewstuart2 7y ago
This saying rubs me the wrong way, because confidentiality is 1/3 of security. Obscurity is critical or this wouldn't be a vulnerability.
- bayindirh 7y agoConfidentiality is a valid layer of security, however security solely by obscurity is wrong. You can have unintentional exploits/vulnerabilities in free/open source software or hardware too.
- xondono 7y agoThe critical part is understanding that confidentiality is temporal. All “secrets” are eventually revealed, security is about managing the risks and timing associated with this revelations
- paulddraper 7y agoThe question is: how much needs to be kept confidential? "Obscurity" general refers to situations where "everything" is confidential. And when everything is confidential priority one, nothing is, since people can't work like that. Cryptography attempts to sequester the confidential data into a small number of bytes that can be protected, leaving larger body of data (say, the algorithm) non-confidential.