Obscurity Is a Valid Security Layer

Re:Obscurity Is a Valid Security Layer by omginternets on Tuesday June 07, 2016 @07:31PM (#11858893)

Come on, now I'm starting to suspect you're commenting in bad faith.

Just to reiterate, SSH was an example of the general problem that is misconfigured/buggy software. OpenSSH is certainly one of the most secure programs I'm aware of, but the same can't be said for things like wordpress.

Eventually, something gets messed up (if only momentarily), and being nonstandard makes you less susceptible to scripted breaches.

We can debate whether the tradeoff is worthwhile (and in many cases it's not), but it's a valid gosh-darn secruity layer!

[ Parent | on HN ]

Re:Obscurity Is a Valid Security Layer by tptacek on Tuesday June 07, 2016 @09:08PM (#11859306)

If you can't deploy passwordless SSH, you have problems port-knocking can't solve.

[ Parent | on HN ]

Re:Obscurity Is a Valid Security Layer by omginternets on Wednesday June 08, 2016 @08:12AM (#11861634)

I'm at a loss for words. I implore you to re-read this comment thread and try to understand what I'm saying.

You're responding to an argument I haven't made.

[ Parent | on HN ]