Skip to content

Comment on Bucket Stream: Finding S3 Buckets by watching certificate transparency logsparent

Comments

Ahh.. OK. Yeah, I wasn't trying to make a realistic example. Yes, completely agree with your reply.

By the way I think the reason that people, including myself, are confused about what exactly security by obscurity means, is that even the experts don't explain it very clearly.

An example that always comes into my mind when we talk about security by obscurity is the one give int he "Applied Cryptography" book:

"If I take a letter, lock it in a safe, hide the safe somewhere in New York, then tell you to read the letter, that's not security. That's obscurity."

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.