4 ms·
But wait for security cargo-culters call it "security by obscurity"
by raverbashing 2y ago
But wait for security cargo-culters call it "security by obscurity"
- ip26 2y agoAll that private key nonsense falls in this bucket as well. What else is a private key than an attempt to guard your system behind a thin veil of "an obscure number I know and you don't"? Classic security by obscurity.
- portaouflop 2y agoSo everything is security by obscurity?
- rikkert 2y agoalways has been...
- raverbashing 2y agoOfficially no, as one (or more secrets) are allowed But given how some "security specialists" behave, I wouldn't put it past them
- mmcnl 2y agoNothing wrong with security by obscurity. It's widely used and it is effective. Security is security. Usually there are easier and more effective methods though, so if it's your only security layer then you might have missed a few things.
- rileymat2 2y agoThe main reasonable criticism would be that it obscures the things you missed from naive audits while still being accessible by an attacker. So you hide the issue from the "good guys" while not baring much entry by the "bad guys". I have seen this pattern emerge many times, because what is obscure to you may not be obscure to someone else. So it /causes/ you to miss things.
- saagarjha 2y agoSounds like that's just you.