full-disclosure - "security by obscurity"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20021208153008.GU57414@trance.org>
From: niels=netsys at bakker.net (Niels Bakker)
Subject: "security by obscurity"

* SkyLined@...p.tudelft.nl (Berend-Jan Wever) [Sun 08 Dec 2002, 06:08 CET]:
> Hmmmm...
> ... isn't hiding your root password security through obscurity ?
> ... isn't hiding your private PGP key security through obscurity ?
> ... isn't 90% of security based on these kinds of obscurity ?

No.  You are confusing risks, vulnerabilities and threats.  The
application of "security through obscurity" to your root password would
be not having one and allowing root logins over the network, meanwhile
hoping that nobody will try to log in as root.

	-- Niels.

-- 
"War is God's way of teaching Americans geography."
		-- Ambrose Bierce, writer (1842-1914)