1) Every piece of code on that box is open source. Security-through-obscurity hoping people won't find your admin pages is senseless.
2) There are far more effective ways of tracking users' browsing history than trying to scrape extremely ephemeral data like what you can find on the Apache status page. As someone mentioned, even the Apache project themselves leave this open.
Comments
1) Every piece of code on that box is open source. Security-through-obscurity hoping people won't find your admin pages is senseless.
2) There are far more effective ways of tracking users' browsing history than trying to scrape extremely ephemeral data like what you can find on the Apache status page. As someone mentioned, even the Apache project themselves leave this open.
He said IP restricted or password protected. That's not "security through obscurity".
And he is responding to the "finding admin pages or urls".
Actually, he said "admin pages and such".