4 ms·
Security by obscurity is the weakest form.
by schwartzworld 4y ago
Security by obscurity is the weakest form.
- 2OEH8eoCRo0 4y agoEveryone loves this phrase but it's far from a universal truth. Sure, it applies to shipped software, but I'm not sure that it applies to military hardware. Regardless, you really think that military hardware should be open sourced?
- schwartzworld 4y agoFirst of all, the GP comment was talking about software, not hardware. Something made by the military to be consumed by only them probably doesn't need to be open sourced. Same thing as if you write a program for yourself that only you use. Once something is intended to be consumed by the public, it should absolutely be open sourced. Voting machine software, tax filing software, etc.
- 2OEH8eoCRo0 4y agoWhat about software that simulates hardware? That's a thing. I agree though, I just don't think it's an absolute rule. Voting machines and other stuff that the public uses probably should be.
- pabs3 4y agoJust because military software isn't released publicly, doesn't mean it shouldn't be open source (the OSI definition, not the "public source" definition).
- predmijat 4y agoOne counterexample - changing SSH port from default one reduces login attempts by 99.999%. I can go on :) Yes, if someone is after you specifically it won’t help, but you avoid automated stuff.
- dlahoda 4y agoand why avoiding such automated stuff is good?