5 ms·

Obscurity isn’t a substitute for security. You still need to have proper authentication and authorization in place.

• SahAssar 5y ago
  It can still leak information, like if a companies customers have sequential id's and your id is 590 then it is reasonable to assume that the company has had around 500-600 customers. It is usually not something to worry about, but in some cases you want to avoid leaking that info.
  • Symbiote 5y ago
    The German Tank Problem is one example of this. The Allies estimated how many tanks Germany was producing based on the serial numbers, and this gave a closer result compared to other intelligence sources. https://en.wikipedia.org/wiki/German_tank_problem https://en.wikipedia.org/wiki/German_tank_problem
  • laurent92 5y ago
    Or Jira tickets. When you submit two support cases in a few days and the number increased by 20 while the company is still a startup, you are pretty sure to have no decent answer.
    • combatentropy 5y ago
      So is that a bug or a feature ;)