2 ms·
Obscurity as a primary security method is criticized when it exist as an alternative to being, you know, actually secure. Like, I could have RCE's in my softwa
by nullc 6y ago
Obscurity as a primary security method is criticized when it exist as an alternative to being, you know, actually secure.
Like, I could have RCE's in my software and hide the source to hopefully slow you from finding them. ... or I could fix the bugs!
But for many things, being "actually secure" isn't cheap or even possible at all... and perhaps obscurity and other less strong tools are the best anyone can do.