> security is not gained through obscurity
However, this one is tricky; it's been circulating as an unfinished rational-religious dogma in software development communities.
The complete correct statement is security *only* through obscurity is bad, e.g. security only through steganography is bad (while a combination of both may produce a synergic effect—improve plausible deniability).
Yet obscurity still introduces complexity, so it should be wisely balanced when necessary to have at all.
#devstr
https://mobeigi.com/blog/security/security-through-obscurity-is-not-bad/
codonaft
npub1al…7rg94
2026-08-01 22:07:29 GMT
in reply to nevent1q…9fhx
Author Public Key
npub1alptdev5srcw2hxg03567p4k6xs3lgj7f6545suc0rzp0xw98svse7rg94Published at
2026-08-01 22:07:29 GMTEvent JSON
{
"id": "869bc4d47c425253dfa7debfe93a656182d82805a2cb6bc1502a453138ac80ca",
"pubkey": "efc2b6e59480f0e55cc87c69af06b6d1a11fa25e4ea95a439878c41799c53c19",
"created_at": 1785622049,
"kind": 1,
"tags": [
[
"e",
"00003df82778bce5574dc8e9b3b391d8fc431ea2a29b1663ee30681cf71af6be",
"",
"root"
],
[
"p",
"b7cf9f42a796b091e843dce919d3ef4c0dc82e029452edf0bdbcdeb9ecb93e78"
],
[
"t",
"devstr"
]
],
"content": "\u003e security is not gained through obscurity\n\nHowever, this one is tricky; it's been circulating as an unfinished rational-religious dogma in software development communities.\n\nThe complete correct statement is security *only* through obscurity is bad, e.g. security only through steganography is bad (while a combination of both may produce a synergic effect—improve plausible deniability).\n\nYet obscurity still introduces complexity, so it should be wisely balanced when necessary to have at all.\n\n#devstr\n\nhttps://mobeigi.com/blog/security/security-through-obscurity-is-not-bad/",
"sig": "6fa0c21034148b94cc1f90af354007370809c3ba901cc05595c1c65229211e7b73740f1544f63d25e45df046416d7366d8be85b03a241d6244006f05d145dfc5"
}