Commentary
Commentary
News
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
Commentary
Quick Hits
Commentary
Commentary
Commentary
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
One site I converted to WordPress previously ran on a CMS of sorts that you could edit by going to www.mydomain.com/data/ - no password required, pure security by obscurity. So compared with that, WordPress was certainly...
In reply to: Re: Custom platforms another example of security by obscurity
Better to deride obscurity than end up back where we started: Obscurity is Security
In reply to: Security v. Obscurity
Yep... we agree. The best security is securely designed systems, but there is no point in making those systems easy to find. ^_^
Corey
In reply to: Re: slows down an attack -- so it helps
I absolutely agree... However, to be devils advocate to this point (and my own article), I think this will only be the case if you have security conscious and trained folks creating the custom systems. Since they are blackboxes,...
In reply to: Re: Custom platforms another example of security by obscurity
That is an excellent point! When relying on someone elses' systems (the cloud) obscurity is NOT good. We need transparency in what tactics and strategies our external partners are using to protect out data... But in that...
In reply to: Re: Know your risks first
Interesting article, Corey. Something to consider here is that there is a distinction between obscurity, where you rely upon the use of an unknown or custom system to trip up a tracker, and a defensive posture where you...
In reply to: Know your risks first
There's also some security benefit from using a custom platform, such as a homegrown content management system instead of WordPress. WordPress has the advantage of being tested constantly by those trying to break it (maliciously...
In reply to: Custom platforms another example of security by obscurity
It seems like you are reacting to the overuse of a good idea. The good idea is that you have to put your energy into fixing the basic security of your system and NOT rely on obscurity. A determined bad guy will...
In reply to: slows down an attack -- so it helps
Thanks for those simple obfuscations, Corey. Wondering if you've tried them out in practice.
In reply to: Good examples but do they work?
The US Government has lost its credibility. What reason is there to trust them? That said, what reason was there ever to trust them. Patriotism in this country demands distrust of those that govern. There...
In reply to: Credibility and the Civil Cyber War
It wasn't the NSA's responsibility to find the HeartBleed bug, and if they did find it, I wouldn't believe their statements that they didn't use it. For them to say otherwise would tip off various parties that their servers...
In reply to: Don't expect the NSA to help or even come clean
Tweet This
