3 ms·
No, "obscurity" does not mean "bad security", it specifically refers to the practice of hiding the details of the mechanism hoping that it makes it more secure.
by chaosite 6y ago
No, "obscurity" does not mean "bad security", it specifically refers to the practice of hiding the details of the mechanism hoping that it makes it more secure.
Things like "Pet names and mother's maiden names are common security questions, so maybe lets not store those in our employee info database" are valid security considerations. And of course they make the employee database slightly less useful.