I wouldn't say it was obvious... there's a difference between planned StO and having it just turn out that way. I guess the StO approach gets a bad rep for being the security model you're using when you aren't using a security model. At any rate, I guess that an awful lot of people rely on obscurity as their safety net. When you do leave a security hole by mistake, at least there's the chance that nobody will notice. Anyway, isn't obscurity the main weapon of the CIA et al? "need-to-know" and all? You don't see them talking about their spying arrangements openly, just so that people can mail in helpful suggestions...
Slashdot Mirror
I wouldn't say it was obvious... there's a difference between planned StO and having it just turn out that way.
I guess the StO approach gets a bad rep for being the security model you're using when you aren't using a security model.
At any rate, I guess that an awful lot of people rely on obscurity as their safety net. When you do leave a security hole by mistake, at least there's the chance that nobody will notice.
Anyway, isn't obscurity the main weapon of the CIA et al? "need-to-know" and all? You don't see them talking about their spying arrangements openly, just so that people can mail in helpful suggestions...