4 ms·
Glazing over Security
- advael 2y agoI find it really unfortunate that a "security through obscurity" mindset has remained deeply embedded in conventional wisdom despite its well-understood flaws I entirely blame tech companies for this one. While organizations like Microsoft, Google, and Apple have made the argument that "obscurity is good for you actually" for completely cynical reasons that transparently benefit their business over their users, repeating their lies carries the clout of their tech organizations, and so has gotten a lot more credibility among people who should know better than most crackpot positions that go against the widespread consensus of the field ever do otherwise It's kind of like how petrol companies have warped the dialogue around climate change, and as in that case, their denialism seems oddly robust to an absolute mountain of compounding evidence that their position is wrong
- GaggiX 2y agoEven non-tech people had big doubts about Glaze or similar (like nightshade) before the paper and this article were published, I think now only in total denial would you believe the claims of the Glaze team.
- deleted 2y ago[deleted]
- Kye 2y agoObscurity has never been a major hindrance to people who want to break security, but it does hinder people who want to make the security better. The ability to run the code, even in binary form, and produce an output from an input negates any possible benefit from obscurity. It _will_ be broken. Denying researchers access just means that break will happen faster, and past obfuscations are more likely to be reversible. It does nothing good.