3 ms·
> I think that says something. I've worked on the triaging side of large corporate bug bounty programmes & trust me when I say that security-by-obscurity is fa
by lucideer 1y ago
> I think that says something.
I've worked on the triaging side of large corporate bug bounty programmes & trust me when I say that security-by-obscurity is far more impactful in keeping our world (incidentally) secure than any active measure. Absence of exploit does not equal absence of vulnerability.
- actinium226 1y agoI think it's unfair to say that Coinbase has effectively "gotten lucky" in not being hacked. Security by obscurity makes sense when you have a low traffic low stakes site, but a place like Coinbase can't rely on that. They are a huge target, they have to take into account the possibility of disgruntled/bribed ex-or-current-employees abusing their knowledge of CB's security systems. They host coins like Monero and others which can obscure where the money is sent.