New posts in Obscurity

Is it considered bad practice to use company name as part of an SSID?

Is it a security vulnerability to tell a user what input characters are valid/invalid?

Does it improve security to use obscure port numbers?

"Security through obscurity" is bad for security systems but good for spam detection. Why?

Security BY obscurity is horrible. Is security AND obscurity good?

Does username length/complexity/uniqueness positively impact security?

Risk of running services on ports >1024

Session Hijacking through sessionId brute-forcing possible?

Isn't all security "through obscurity"?

How risky is connecting to a hidden wireless network?