4 ms·
That's precisely the attitude I was trying to address with the article. If you ask the top security people in the world, they agree that obscurity can aid secur
by danielrm26 16y ago
That's precisely the attitude I was trying to address with the article. If you ask the top security people in the world, they agree that obscurity can aid security if don't correctly.
Those who disagree with this outright are stuck with someone else's thoughts. Please read: http://danielmiessler.com/study/security_and_obscurity/ http://danielmiessler.com/study/security_and_obscurity/
- zach 16y agoWonderful explanation. I never run SSH on port 22 on a publicly-visible computer when I can help it. I thought it astounding that the idea sometimes meets with scoffing, seemingly with a presumption that such a practice must be the sum total of one's security precautions. No matter how effective a security technique is, it can be shouted down as "taking minimal effort to overcome," "providing a false sense of security" or "not going to stop a determined attacker." Dude, I live in a Bayesian world, I just want to improve the probabilities. Then again, that must be effective rhetoric for getting consulting gigs.