4 ms·
> They aren’t going to explain that to hackers. The idea of security through obscurity needs to die. I wish companies shared their logic behind these decisions
by amerkhalid 4y ago
> They aren’t going to explain that to hackers.
The idea of security through obscurity needs to die. I wish companies shared their logic behind these decisions. Sure bad people will take advantage of it in short-term. But, in long-term, most of the loopholes should be discovered and fixed.
- kube-system 4y agoFraud is not a well-bounded problem like authentication. There is no cryptographic way to prevent fraud. Using behavioral analytics is about the best you can do from behind a keyboard, and if you share the way you're measuring it, people can change their behavior to work around it. One alternative is to put more onerous restrictions on users, so that it is hard or expensive for them to buy or sell on eBay, in which case people may just buy/sell elsewhere. The other alternative is to insert more humans into the process, at which point, you start to look less like an auction website and more like an auction house.
- ipaddr 4y agoThey prevent fraud through authentication. If authentication is unreliable then behavior matters. But behaviour is more easily gamed and abused and has more false negatives affecting customers.
- kube-system 4y agoThe process of transacting physical items has many opportunities for fraud that isn't addressed even by perfect authentication in any way. This is where eBay's tough problems arise.