Security by obfuscation definition of Security by obfuscation in the Free Online Encyclopedia.

(security)

security through obscurity - Or "security by obscurity". A term applied by hackers to most operating system vendors' favourite way of coping with security holes - namely, ignoring them, documenting neither any known holes nor the underlying security algorithms, trusting that nobody will find out about them and that people who do find out about them won't exploit them. This never works for long and occasionally sets the world up for debacles like the RTM worm of 1988 (see Great Worm), but once the brief moments of panic created by such events subside most vendors are all too willing to turn over and go back to sleep. After all, actually fixing the bugs would siphon off the resources needed to implement the next user-interface frill on marketing's wish list - and besides, if they started fixing security bugs customers might begin to *expect* it and imagine that their warranties of merchantability gave them some sort of rights.

Historical note: There are conflicting stories about the origin of this term. It has been claimed that it was first used in the Usenet newsgroup in news:comp.sys.apollo during a campaign to get HP/Apollo to fix security problems in its Unix-clone Aegis/DomainOS (they didn't change a thing). ITS fans, on the other hand, say it was coined years earlier in opposition to the incredibly paranoid Multics people down the hall, for whom security was everything. In the ITS culture it referred to (1) the fact that by the time a tourist figured out how to make trouble he'd generally got over the urge to make it, because he felt part of the community; and (2) (self-mockingly) the poor coverage of the documentation and obscurity of many commands. One instance of *deliberate* security through obscurity is recorded; the command to allow patching the running ITS system (altmode altmode control-R) echoed as $$^D. If you actually typed alt alt ^D, that set a flag that would prevent patching the system even if you later got it right.

Mentioned in	?		Encyclopedia browser	?		Full browser	?
No references found			Secure Shell Secure Sockets Layer secure transaction secure USB drive secure visual communications secure voice secure Web server SecureZIP SecurID card Securinega Securing Performance of Obligations securinine securite explosive Securities Securities and Exchange Commission securities trading security Security Administrator's Integrated Network Tool security alarm system security appliance Security Association Security Association ID Security at the Halt security audit Security Bay State Marine Park Security by obfuscation security by obscurity security cabinet door-contacts security card security classification security clearance security code security control officer Security Council Security Council of The United Nations security event management software security glass security glazing security grille security ID security kernel security lock security loophole security patch security perimeter security protocol security reporting/alerting system security risk security scan security screen security suite			Security Auditor's Research Assistant Security Authentication Module Security Authority Security Aviation Audio and Video Surveillance Security awareness Security Awareness and Training Plan Security Awareness Index Security Awareness Training Security Awareness Training & Education Security Bank Corporation Security Bank Holding Co. Security Banner Security Banner Data Template Security Bay State Marine Park Security Benefit Group, Inc. Security Benefit Life Insurance Company security blanket security blankets security blankets Security breach Security breach Security breach Security Breach Information Act Security breaches Security breaches Security Business & Technology Unit Security Business Bank Security Business Practices Reference Security by obfuscation Security by obscurity Security by obscurity security cabinet door-contacts Security Call Analysis and Monitoring Platform Security camera Security camera Security cameras Security cameras Security Capital Preferred Growth security card Security Category security certification Security Certification and Authorization Package Security Certification and Authorization Process Security Certification Level Security Certification Level for High Standards Security Certification Test and Evaluation Security Certification Working Group Security Certified Network Architect Security Certified Network Professional Security Certified Network Specialist Security Certified Program Security Change Request Security characteristic line Security characteristic line Security Characteristic Lines Security Charter security check

security through obscurity (redirected from Security by obfuscation)

security through obscurity
(redirected from Security by obfuscation)