3 ms·
I dunno, it feels to me that people are too ready to tell "white half-truths" to simplify the message, and assume everyone else is too dense to understand nuanc
by hnfong 3y ago
I dunno, it feels to me that people are too ready to tell "white half-truths" to simplify the message, and assume everyone else is too dense to understand nuance...
Why can't we just outright say to everyone: "learn the correct way to secure things first. THEN feel free to add obscurity onto that if you like"? There's probably some way to convert that message into a catchy phrase, instead of just demonizing security by obscurity, yet having a small sect of elites in the know who break their own "rules"...
FWIW, this (rant) applies to a broader scope as well, beyond "security by obscurity".
- bruce511 3y agoWhen educating anyone about anything we tell half-truths all the time. It's a necessary path to understanding. (For example, we teach kids the earth is round, then we tell them it's an oblate spheroid, then we tell them even that is a approximation. ) In a forum like this, the message is often distilled because one doesn't know the makeup of the audience. The simple rule is a good starting point for entry-levels. Nuance can be hard to convey, because its usually a combination of context and resources which determine how far down a rabbit hole you can go. I agree that this happens all the time, in every field. I'm dumb when it comes to my car, so my mechanic gives me simple rules to follow. Doctors tell everyone to eat less, exercise more, but in truth you can eat too little, and exercise too much. The -real- problem happens even a simplification becomes obsolete. We see this in security a lot. Someone wrote the company policies 20 years ago, and they're insisting on say no-paste-on-the-password field, because that's in the policy, even though its since been shown to weaken security.