11 ms·
The driving routes are not obscurity but actual secrets. Similarly, a private key is not obscurity but an actual secret. Something that can be trivially observ
by Repulsion9513 3y ago
The driving routes are not obscurity but actual secrets. Similarly, a private key is not obscurity but an actual secret.
Something that can be trivially observed (changed port -> nmap, secret obfuscated code in your executable, behavior of your server) is not a secret.
That said, obscurity can provide defense-in-depth (i.e. protection against scanning the default port).
-- Changing the port can be useful for other reasons too, our pfsense's at work run ssh on 2222 simply because otherwise the logs are absolutely full of scanners getting banned (despite having password auth disabled).
- OJFord 3y agoTrue, driving routes wasn't a great example. But I think the point stands if you take something like the way they drive (number of vehicles, how they manage junctions, etc.) or which exit they use. You can observe stuff like the way police motorcyclists (I think they call them 'outriders') speed ahead to the next junction, stop traffic, convoy passes through, rear motorcyclists meanwhile catch up to the front of the convoy and the ones holding traffic then adopt their position at the rear, swapping each junction. But there's no benefit to documenting/publicising that (and I'm sure there's nuance to it I haven't picked up on). It's probably also easier to get involved in the police and go on that advanced driving course or whatever and learn all about the techniques they use than it is to actually be assigned to that team - it's not super secret, but the more you keep hidden the harder you make it to be subversive.