Commentary
Commentary
News
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
Commentary
Quick Hits
Commentary
Commentary
Commentary
Everyone who has a user account on any system relies on security through obscurity. Consider the user ID/password combination. One component (the ID) may or may not be obscure, but the second (the password)...
In reply to: We rely on Security through Obscurity
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: How A Little Obscurity Can Bolster Security
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: slows down an attack -- so it helps
Sure, don't give anything away.Don't pick names easy to guess or commonly used. Passwords are just the final threshold.
However, if your domain can be enumerated, the ship has sailed.
Which is more important?
In reply to: Re: Security v. Obscurity
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
One site I converted to WordPress previously ran on a CMS of sorts that you could edit by going to www.mydomain.com/data/ - no password required, pure security by obscurity. So compared with that, WordPress was certainly...
In reply to: Re: Custom platforms another example of security by obscurity
Better to deride obscurity than end up back where we started: Obscurity is Security
In reply to: Security v. Obscurity
Yep... we agree. The best security is securely designed systems, but there is no point in making those systems easy to find. ^_^
Corey
In reply to: Re: slows down an attack -- so it helps
I absolutely agree... However, to be devils advocate to this point (and my own article), I think this will only be the case if you have security conscious and trained folks creating the custom systems. Since they are blackboxes,...
In reply to: Re: Custom platforms another example of security by obscurity
That is an excellent point! When relying on someone elses' systems (the cloud) obscurity is NOT good. We need transparency in what tactics and strategies our external partners are using to protect out data... But in that...
In reply to: Re: Know your risks first
Interesting article, Corey. Something to consider here is that there is a distinction between obscurity, where you rely upon the use of an unknown or custom system to trip up a tracker, and a defensive posture where you...
In reply to: Know your risks first
There's also some security benefit from using a custom platform, such as a homegrown content management system instead of WordPress. WordPress has the advantage of being tested constantly by those trying to break it (maliciously...
In reply to: Custom platforms another example of security by obscurity
Tweet This
