Quick HitsNews
NewsNews
CommentaryNews
Commentary
Commentary
CommentaryQuick HitsNews
CommentaryNewsNews
Commentary
News
CommentaryQuick HitsNewsNews
This flaw has been in circulation for years (plural). It could have been exploited by anyone during that time. It is unbelievable that nobody discovered this flaw until last week, especially since the source code...
In reply to: We must assume the worst
Everyone who has a user account on any system relies on security through obscurity. Consider the user ID/password combination. One component (the ID) may or may not be obscure, but the second (the password)...
In reply to: We rely on Security through Obscurity
Aha - but imagine - if software developers and vendors had really accepted the wisdom of Multics and then the segmented memory architecture in the Intel 286 chip and beyond, memory bounds and memory typing would be handled...
In reply to: Re: Memory management not the core issue
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: How A Little Obscurity Can Bolster Security
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: slows down an attack -- so it helps
Agree that assurance is a desirable feature. But assurance implies accountability, which implies liability. If the software is developed for free and given away for free, and the license clearly warns you that it is provided...
In reply to: But assurance equals accountability equals liability.
Very interesting post ... satellite components in many cases lack of proper defense measures. Many satellite architectures were designed many years ago, while their life cycle is very long the cyber threats evolution...
In reply to: Re: Oh, fabulous
Sure, don't give anything away.Don't pick names easy to guess or commonly used. Passwords are just the final threshold.
However, if your domain can be enumerated, the ship has sailed.
Which is more important?
In reply to: Re: Security v. Obscurity
Queue conspiracy theorists that this is what happened to the Malaysian Airlines flight in 3, 2, ...
In reply to: Oh, fabulous
I should clarify that OneLogin doesn't focus particularly on start-ups, but that's where we are seeing this trend. 90% of our customers are not startups and have Active Directory, some of them with dozens of forests and...
In reply to: Re: Unusual article
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
One site I converted to WordPress previously ran on a CMS of sorts that you could edit by going to www.mydomain.com/data/ - no password required, pure security by obscurity. So compared with that, WordPress was certainly...
In reply to: Re: Custom platforms another example of security by obscurity
Containing Corporate Data on Mobile Devices
If you’re still focused on securing endpoints, you’ve got your work cut out for you. WiFi network provider iPass surveyed 1,600 mobile workers and found that the average US employee carries three devices -- a smartphone, a computer, and a tablet or e-reader -- with more than 80% of them doing work on personal devices.
Tweet This
0 Comments
