4 ms·

In software circles, this is called "security by obscurity" and is frowned upon. And if it's a bad idea with software, I'd argue it's also a bad idea with nucl

In software circles, this is called "security by obscurity" and is frowned upon. And if it's a bad idea with software, I'd argue it's also a bad idea with nuclear weapons.

hchz 6y ago
Pakistani nuclear command and security forces are operated as cells isolated from the civilian government and regular army for a good reason. Executing a process covertly doesn't imply "security by obscurity".
_jal 6y ago
People constantly misuse that quote to claim that "obscurity" should never be used. This is false; denying your opponent information is a critical component of a well-designed security process. It should not be the only mechanism employed. (I have no clue what, if any, other measures Pakistan employed.)
- toomanyrichies 6y ago
  Yep, I should have clarified that's what I meant. Agreed that obscurity should not be the only strategy employed.
- kinj28 6y ago
  As an end user I use obscurity as my means to deny information - for instance at ATM when asked for a pin I would purposely touch a few more keys to break the sequence on the ATM machine.
- rkangel 6y ago
  You are absolutely correct. Having worked in the field I can tell you that Security Research into iPhones is a lot harder than Android. You have the full source of major important components of Android (like the OS Kernel), and you have very little of that for iOS. They've both got great, constantly advancing security models, but the iPhone's extra layer of security will continue to give it the edge (in my opinion at least).
vkou 6y ago
Unless you are opposed by an all-knowing god, security through obscurity can be a useful part of a defense-in-depth system.
kayfox 6y ago
The United States also transports nuclear weapons in ways that are not obviously a transportation of nuclear weapons, including in seemingly unarmed semi-trucks for thousands of miles. Its a pretty effective way of moving things that need high secrecy and present logistical challenges in required protection. In the past highly valuable items have been moved using mundane methods with little fanfare.

In software circles, this is called "security by obscurity" and is frowned upon. And if it's a bad idea with software, I'd argue it's also a bad idea with nuclear weapons.

hchz 6y ago

Pakistani nuclear command and security forces are operated as cells isolated from the civilian government and regular army for a good reason. Executing a process covertly doesn't imply "security by obscurity".

_jal 6y ago

People constantly misuse that quote to claim that "obscurity" should never be used. This is false; denying your opponent information is a critical component of a well-designed security process. It should not be the only mechanism employed. (I have no clue what, if any, other measures Pakistan employed.)

toomanyrichies 6y ago
Yep, I should have clarified that's what I meant. Agreed that obscurity should not be the only strategy employed.
kinj28 6y ago
As an end user I use obscurity as my means to deny information - for instance at ATM when asked for a pin I would purposely touch a few more keys to break the sequence on the ATM machine.
rkangel 6y ago
You are absolutely correct. Having worked in the field I can tell you that Security Research into iPhones is a lot harder than Android. You have the full source of major important components of Android (like the OS Kernel), and you have very little of that for iOS. They've both got great, constantly advancing security models, but the iPhone's extra layer of security will continue to give it the edge (in my opinion at least).

vkou 6y ago

Unless you are opposed by an all-knowing god, security through obscurity can be a useful part of a defense-in-depth system.

kayfox 6y ago

The United States also transports nuclear weapons in ways that are not obviously a transportation of nuclear weapons, including in seemingly unarmed semi-trucks for thousands of miles. Its a pretty effective way of moving things that need high secrecy and present logistical challenges in required protection. In the past highly valuable items have been moved using mundane methods with little fanfare.