> The correct definition is simply "using obscurity as a security defense mechanism", nothing more. Also stated as "security happens in layers", and often obsc

> The correct definition is simply "using obscurity as a security defense mechanism", nothing more. Also stated as "security happens in layers", and often obscurity is a very good layer for keeping most of the script kiddies away and keeping the logs clean. My personal favorite example is using a non-default SSH port. Even if you keep it under 1024, so it's still on a root-controlled port, you'll cut down the attacks by an order of magnitude or two. It's not going to keep the NSA or MSS out, but it's still effective in pushing away the common script kiddies. You could even get creative and play with port knocking - that keeps under-1024 ports logs clean.