News for hackers. Stuff that matters.

A comment on Security through obscurity is underrated. Parent comment

Re:Security through obscurity is underrated by traceroute66 on Monday October 24, 2022 @07:42AM (#33315445)
> Heartbleed was in openssl... What does it have to do with openssh ?

Exactly.

I can't speak for Log4J as I have no experience, but I do know that anyone sensible agrees that OpenSSL is a pile of bloated dog poo.

OpenSSH, as I've already said, is written by the OpenBSD crew. They have a track record of having OCD about writing secure and correct software.

[ Parent | on HN ]
Re:Security through obscurity is underrated by dumpsterdiver on Monday October 24, 2022 @10:35AM (#33317211)
Okay, so are they going to live forever and keep writing impeccable software for eternity? What happens when they tire of their immortality, and decide to pass the torch?
[ Parent | on HN ]
Re:Security through obscurity is underrated by remram on Monday October 24, 2022 @06:13PM (#33323339)
Then we'll stop using it? On any port number?
[ Parent | on HN ]