Attackers have a mountain of tools and attack vectors available to them and they're going to try those first even if they have the source code. Also, when has s

Attackers have a mountain of tools and attack vectors available to them and they're going to try those first even if they have the source code. Also, when has security through obscurity actually worked? I hear the occasional blogger and tweeter spout this to get some page clicks, but I tend to side with academia here.