My Journey Away from the JAMstack

Re:My Journey Away from the JAMstack by justinclift on Monday July 31, 2023 @07:59PM (#36950577)

While it kind of is security by obscurity, it's a very basic piece of server hardening to stop telling potential attackers what software you're using (within reason).

Back in the day (!), server software used to honestly respond with things like the software name and exact version number it was running.

Naturally, that meant scanning for vulnerabilities was a lot easier than it needed to be.

[ Parent | on HN ]

Re:My Journey Away from the JAMstack by TylerE on Monday July 31, 2023 @09:09PM (#36951076)

All security is by obscurity. Some is useful.

[ Parent | on HN ]

Re:My Journey Away from the JAMstack by cies on Tuesday August 01, 2023 @03:00AM (#36953192)

Not true. There are some real cryptographic realities that are based in "open" math principles.

There's also the way of most using runtimes/libraries that (constantly) have CVEs in them; and understanding why it is that these languages have CVEs in the first place (see my comment on "eval()").

[ Parent | on HN ]

Re:My Journey Away from the JAMstack by justinclift on Tuesday August 01, 2023 @03:17AM (#36953299)

Also, the overly muscled guys out the front of night clubs aren't there for "obscurity" type security. ;)

[ Parent | on HN ]

Re:My Journey Away from the JAMstack by TylerE on Tuesday August 01, 2023 @03:03AM (#36953209)

A cryptographic key is an obscured secret.

[ Parent | on HN ]