News for hackers. Stuff that matters.

A comment on Security by obscurity is underrated. Parent comment

Re:Security by obscurity is underrated by outworlder on Friday September 11, 2020 @01:53PM (#24445392)
Well, yes. But where would the attacker be if they are in a position to intercept the traffic?

The answer to that may dictate if the technique would have value for you.

[ Parent | on HN ]
Re:Security by obscurity is underrated by jonfw on Friday September 11, 2020 @02:46PM (#24446033)
I'm just saying that port knocking just results in another secret you have to manage. It's just adding another locked door. Why use a locked door that's a pain in the ass and insecure in transit?

If you want two layers of secret-based auth- why would you make your second layer one that's objectively less secure and more unwieldy than other layers?

[ Parent | on HN ]