A lot of people don’t seem to remember (or weren’t around) when this phrase was coined. Security by/through obscurity very much referred to doing things like st

A lot of people don’t seem to remember (or weren’t around) when this phrase was coined. Security by/through obscurity very much referred to doing things like starting a bash shell on an obscure port so you could telnet to it and just have a shell (no login at all, and each host didn’t have a firewall either). Or naming a directory something like ‘...’ and people would overlook it in the ls listing. Or leaving a shell running on a serial/modem line assuming that no one would know the phone number to dial in to. Even a standard ssh install that allows password login on a regular port is already miles ahead of where we were a few decades ago.