Security through obscurity is not to be avoided outright, using only security through obscurity is to be avoided outright. If you have an otherwise secure syste

Security through obscurity is not to be avoided outright, using only security through obscurity is to be avoided outright. If you have an otherwise secure system and then you obscure it in some ways, the worst that can happen is that it has no effect. So the problem is in thinking it alone will protect you, but it is not harmful in itself. I think people throw this phrase out because it scans nicely and makes you sound like you know what you're talking about, especially to yourself.