>I really hate the accusation that changing services to uncommon ports is security through obscurity. If you're doing this for security reasons, then it is by

>I really hate the accusation that changing services to uncommon ports is security through obscurity. If you're doing this for security reasons, then it is by definition 'security through obscurity'. The problem is that you don't like the term because it generally carries a negative connotation. What you and the author should be arguing is that 'security through obscurity' shouldn't be seen as a negative necessarily. >So when you have SSH listening on some uncommon port and see hits in your logs you have a reasonable assurance the attacker isn't some script kiddy spamming the "attack" button on some stupid app. How do you figure that?