Security through obscurity is not effective in the sense that dedicated attackers, or those with large amounts of resources can _eventually_ crack the code. It

Security through obscurity is not effective in the sense that dedicated attackers, or those with large amounts of resources can _eventually_ crack the code. It gets such bad attention because people NOT in the security field (or aware of security methods) tend to view it as a good line of defense. I've seen implementations where the obscurity was client-side JavaScript that modified the POST. The coder thought this would protect the server from malicious payloads.... Unfortunately the obscurity is lost when you provide all visitors with the function to do the obfuscation.