News for hackers. Stuff that matters.

A comment on Security through obscurity is underrated. Parent comment

Re:Security through obscurity is underrated by kayson on Monday October 24, 2022 @02:17PM (#33320300)
So you're saying botnets will dictionary attack subdomains on every IP? Any sources?
[ Parent | on HN ]
Re:Security through obscurity is underrated by naasking on Monday October 24, 2022 @05:13PM (#33322747)
No, I'm saying that's one of many behaviours. They mine domains and URLs scraped from email addresses, email headers and bodies, online content, and more. Your site is not "secure" when that security can be circumvented by someone pasting a URL into an email.
[ Parent | on HN ]