What is the name of the technique of hiding components to ensure information?

12

I ran away from the name of this technique in which the developer instead of dealing with the problem simply hides it.

Exemplifying: I have a button that, when clicked, causes a DROP TABLE to occur in my database. I know this but instead of fixing the problem, I just hide the button so nobody clicks. However, anyone with knowledge can circumvent this "my" solution.

What is the name of this technique?

    
asked by anonymous 06.01.2015 / 22:29

1 answer

13

The original term is Security through obscurity or security for obscurantism in Portuguese.

Contrary to what some preach is a fairly effective technique. It's something extreme used inside and outside computing. The problem begins to exist when it is the only security technique. Consider it as an extra layer of security.

Invest in something that is not popular, something that only you know how it works and the chances of you being successfully attacked are greatly diminished. You would have to be a much-wanted target for someone to bother figuring out the flaws in your safety. It is much easier to discover the security flaws of something popular, that everyone uses, that anyone can know how it works.

You just can not think that a basic hiding place will help anything. There are good and bad ways to do this.

There are many security experts but lack of risk management experts.

A curious case to have the questioning in a system promoted by the White House . No one questions her physical safety, too, because in part because no one knows how it works. Developer has the craze to be more real than royalty.

The example of the question does not seem to be obscurantism. It looks really cracking:)

    
06.01.2015 / 22:42