3 ms·
This sounds a lot like Security through Obscurity to me. Why does it work with DDOS, but not source code?
by chimi 14y ago
This sounds a lot like Security through Obscurity to me. Why does it work with DDOS, but not source code?
- lmkg 14y agoSecurity through Obscurity is actually a valid tactic, in most arenas. It can't be relied upon in isolation, which is what many people tried to do. If you already have a robust defense system, it adds an additional layer. Additionally, there are different trade-offs for DDOS vs source code. Source code you leave behind obscurity, in order to get a well-tested and well-vetted implementation. In DDOS, you're using ops, not code. All your responses are custom-crafted anyways, so there is no well-tested implementation for you to gain. The benefits of transparency are much smaller, and the benefit is the same.
- Hello71 14y agoJust in case anyone else was confused: The cost is the same.
- anoncow 14y agoIt doesn't. The only thing it does is help the attackers prey on another unsuspecting website. Open business practices anyone?
- taproot 14y agoLow hanging fruit principle.
- deleted 14y ago[deleted]
- deleted 14y ago[deleted]