Security by obscurity is underrated

Re:Security by obscurity is underrated by c0nsumer on Friday September 11, 2020 @02:06PM (#24445540)

For a very specific example, look at the classified ciphers used by the US Gov't TLAs. Why are they classified? Because if they are harder to get info about -- literally obscured -- then it's an additional layer of defense.

Or troop movements during war... Sure, the locations can be figured out, but by not broadcasting locations that's more work for the enemy and thus a bit more secure.

Obscurity is absolutely a key piece of security, because it adds the complexity of discovery.

[ Parent | on HN ]

Re:Security by obscurity is underrated by thinkharderdev on Friday September 11, 2020 @02:11PM (#24445608)

This is true but I think that its not really a binary classification and there is a spectrum from useless and trivial obscurity (base64 encoding some "secret") to actually useful obscurity. After all, you can call password authentication "security through obscurity" since you only need to know the correct sequence of characters and your security relies on that sequence remaining obscure.

[ Parent | on HN ]