Commentary
Commentary
News
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
Commentary
Quick Hits
Commentary
Commentary
Commentary
You are misunderstanding the phrase. 'obscurity' in this context refers to relying on secreting the details of the security mechanism. The big difference is that if you have a reason to suspect your security arrangements, ...
In reply to: Re: We rely on Security through Obscurity
We found in our recent independent research that hospitals, care providers and medical insurers experience twice as many internal security breaches in comparison to other sectors. As we are seeing more and more...
In reply to: Re: Exceptions to the rule?
Everyone who has a user account on any system relies on security through obscurity. Consider the user ID/password combination. One component (the ID) may or may not be obscure, but the second (the password)...
In reply to: We rely on Security through Obscurity
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: How A Little Obscurity Can Bolster Security
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: slows down an attack -- so it helps
Sure, don't give anything away.Don't pick names easy to guess or commonly used. Passwords are just the final threshold.
However, if your domain can be enumerated, the ship has sailed.
Which is more important?
In reply to: Re: Security v. Obscurity
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
One site I converted to WordPress previously ran on a CMS of sorts that you could edit by going to www.mydomain.com/data/ - no password required, pure security by obscurity. So compared with that, WordPress was certainly...
In reply to: Re: Custom platforms another example of security by obscurity
Better to deride obscurity than end up back where we started: Obscurity is Security
In reply to: Security v. Obscurity
Yep... we agree. The best security is securely designed systems, but there is no point in making those systems easy to find. ^_^
Corey
In reply to: Re: slows down an attack -- so it helps
I absolutely agree... However, to be devils advocate to this point (and my own article), I think this will only be the case if you have security conscious and trained folks creating the custom systems. Since they are blackboxes,...
In reply to: Re: Custom platforms another example of security by obscurity
That is an excellent point! When relying on someone elses' systems (the cloud) obscurity is NOT good. We need transparency in what tactics and strategies our external partners are using to protect out data... But in that...
In reply to: Re: Know your risks first
Tweet This
