Ask HN: How did internet discover my subdomain?

Re:Ask HN: How did internet discover my subdomain? by yapyap on Friday March 07, 2025 @09:49AM (#43290616)

> This is one of those false voyeur OS internet tennets designed to get people to publish their stuff.

No it isn’t, it’s a push to get people to login protect whatever they want to keep to themselves.

It’s silly to say informing people that security through obscurity is a weak concept is trying to convince them to publish their stuff.

[ Parent | on HN ]

Re:Ask HN: How did internet discover my subdomain? by HeatrayEnjoyer on Friday March 07, 2025 @11:35AM (#43291594)

If security through obscurity didn't provide any benefit then governments wouldn't have built entire frameworks for protecting classified information.

[ Parent | on HN ]

Re:Ask HN: How did internet discover my subdomain? by ehutch79 on Friday March 07, 2025 @11:43AM (#43291671)

So the only thing protecting classified docs is the public not knowing where they are? That's what security through obscurity is.

[ Parent | on HN ]

Re:Ask HN: How did internet discover my subdomain? by HeatrayEnjoyer on Saturday March 08, 2025 @02:01AM (#43298131)

No, it's not the only thing, but it is one layer of defense in depth.

No one is saying that obfuscation should be the only layer. Your defense should never hinge on any single protection layer.

[ Parent | on HN ]

Re:Ask HN: How did internet discover my subdomain? by ehutch79 on Saturday March 08, 2025 @01:39PM (#43302358)

So we're all agreeing here. It's ok to hide stuff from sight, but hiding stuff from sight isn't actually security and can't replace at the very least, having password protection.

[ Parent | on HN ]

Re:Ask HN: How did internet discover my subdomain? by HeatrayEnjoyer on Wednesday March 12, 2025 @11:00AM (#43343986)

But it is security. It's one layer of it.

[ Parent | on HN ]