• boatswain@infosec.pub
    link
    fedilink
    arrow-up
    19
    arrow-down
    4
    ·
    2 years ago

    I see this claim all the time, and it bugs me every time. Obfuscation is a perfectly reasonable part of a defense in depth solution. That’s why you configure your error messages on production systems to give very generic error messages instead of the dev-centric messages with stack traces on lower environments, for example.

    The problem comes when obscurity is your only defense. It’s not a full remediation on its own, but it has a part in defense in depth.

    • danA
      link
      fedilink
      arrow-up
      7
      ·
      2 years ago

      Changing the port isn’t really much obfuscation though. It doesn’t take long to scan all ports for the entire IPv4 range (see masscan)

        • danA
          link
          fedilink
          arrow-up
          3
          ·
          2 years ago

          It’s worth it for just having cleaner logs

          Those logs are useful to know which IPs to permanently block :)