4 ms·
Security through obscurity. Doesn't work on the Internet. Doesn't work in real-life.
by reidmain 15y ago
Security through obscurity.
Doesn't work on the Internet. Doesn't work in real-life.
- Retric 15y agoPasswords are Security through obscurity. That does not make them useless, just vulnerable.
- marshray 15y agoA password is a best-effort attempt at implementing the theoretical construct of a 'cryptographic shared secret'. Passwords are from perfect at that of course, but it's not correct to call them 'obscurity' either. The distinction between security and obscurity derives from Kerckhoffs's principle. https://en.wikipedia.org/wiki/Kerckhoffs%27s_Principle https://en.wikipedia.org/wiki/Kerckhoffs%27s_Principle
- mikeash 15y agoThat is not what "security through obscurity" means. The phrase specifically refers to security which relies on secrecy of design or implementation details.