> - Randomizing variable names it just a nuisance, it won't stop any competent pen tester or attacker. But it will stop incompetent attackers - of which there

> - Randomizing variable names it just a nuisance, it won't stop any competent pen tester or attacker. But it will stop incompetent attackers - of which there are many. In fact, they are the vast majority. None of those 'obscurity' techniques will stop a targeted attack. That's not their function. But each of them raises the bar. The more hoops, the better.