> This is simply security through obscurity and once again has zero bearing on the security posture. Not to defend the author or the idea, but this is very cle

> This is simply security through obscurity and once again has zero bearing on the security posture. Not to defend the author or the idea, but this is very clearly untrue. Something similar is routinely done to intentionally break hotlinking usually (tokenized URLs and URL signing). It's ages old and does work, as it's no different to cracking a long and difficult password.