Kelly Schlueter (7/2/2012)
I see two aspects to this.1. ... Yes, security by obscurity is not security, but if internal architecture is known, anybody attacking doesn't have to go through the step of determining what type of architecture and thus what type of vulnerabilities they can try to exploit.
...
This phrase gets repeated incessantly and while technically true, obscurity DOES have significant value (that's why burying your laptop in your car trunk is a lot safer then leaving it on the front seat). Obscurity does reduce the number of potential attackers.
...
-- FORTRAN manual for Xerox Computers --