From owner-freebsd-security@FreeBSD.ORG  Mon Nov 21 20:36:00 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2BE2C16A41F
	for <freebsd-security@freebsd.org>;
	Mon, 21 Nov 2005 20:36:00 +0000 (GMT)
	(envelope-from bigby@ephemeron.org)
Received: from dsl.ephemeron.org (dsl092-035-072.lax1.dsl.speakeasy.net
	[66.92.35.72]) by mx1.FreeBSD.org (Postfix) with ESMTP id E91B943D49
	for <freebsd-security@freebsd.org>;
	Mon, 21 Nov 2005 20:35:51 +0000 (GMT)
	(envelope-from bigby@ephemeron.org)
Received: from home.ephemeron.org (root@home.fake.net [10.0.2.3])
	by dsl.ephemeron.org (8.12.11/8.12.11) with ESMTP id jALKZkJ4077783;
	Mon, 21 Nov 2005 12:35:46 -0800 (PST)
	(envelope-from bigby@ephemeron.org)
Received: from home.fake.net (bigby@home.fake.net [10.0.2.3])
	by home.ephemeron.org (8.12.11/8.12.11) with ESMTP id jALKZiQc091729;
	Mon, 21 Nov 2005 12:35:44 -0800 (PST)
	(envelope-from bigby@ephemeron.org)
Date: Mon, 21 Nov 2005 12:35:44 -0800 (PST)
From: Bigby Findrake <bigby@ephemeron.org>
X-X-Sender: bigby@home.fake.net
To: dtalk-ml@prairienet.org
In-Reply-To: <Pine.LNX.4.63.0511210816460.26145@atlantis.flyingjoke.org>
Message-ID: <Pine.BSF.4.44.0511211228040.91177-100000@home.fake.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Cc: Peter Jeremy <PeterJeremy@optushome.com.au>, ray@redshift.com,
	Danny Carroll <danny@dannysplace.net>, freebsd-security@freebsd.org,
	Jeremie Le Hen <jeremie@le-hen.org>, Marian Hettwer <MH@kernel32.de>
Subject: Re: Need urgent help regarding security
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2005 20:36:00 -0000

I'd just like to make a small contribution to this discussion.

While most of us understand the merits and flaws of security through
obscurity, I would like to point out the semantic fact that the phrase is,
indeed, "security *through* obscurity", that while not flawless, obscurity
is another path to security, that it is (more) difficult to attack the
host you cannot see, (more) difficult to exploit the flaw you cannot
detect, (more) difficult to connect to the daemon you do not know is
listening.



/-------------------------------------------------------------------------/
I was raised by a pack of wild corn dogs.

                    finger://bigby@ephemeron.org
                    http://www.ephemeron.org/~bigby/
                news://news.ephemeron.org/alt.lemurs
/-------------------------------------------------------------------------/