5 ms·
Security by obscurity works. I don't know why so many people think it doesn't. If you don't have the source code to something, you have to poke around rather
by SnacksOnAPlane 12y ago
Security by obscurity works. I don't know why so many people think it doesn't. If you don't have the source code to something, you have to poke around rather blindly to try to find holes. If you DO have the source code, you can analyze it and find holes in a targeted and specific manner.
I understand the argument that you want to show your code to smart people so you can proactively find and fix holes in it, but that's not always feasible or smart.
- krisdol 12y agoAttackers have a mountain of tools and attack vectors available to them and they're going to try those first even if they have the source code. Also, when has security through obscurity actually worked? I hear the occasional blogger and tweeter spout this to get some page clicks, but I tend to side with academia here.