logoalt Hacker News

Lammylast Sunday at 1:50 AM2 repliesview on HN

> relying _only_ on obscurity

Until it gets obscure enough that we start calling it “public-key cryptography”. Guess the prime number I'm thinking of between 0 and 2↑4096 and win a fabulous prize!


Replies

tux3last Sunday at 7:04 AM

If you replace "security by obscurity" with "Kerckhoffs's principle", yes, absolutely!

The problem with using regular everyday obscurity is that it usually has a small state space and makes for terrible security, but people will treat it like it is cleverly hidden and safe from attackers

If I guess the IPv4 you're thinking of between 0 and 2↑32, ready or not, you win a free port scan

gf000last Sunday at 7:25 AM

As per another comment, we can scan a single port on every public IPv4 address in less than an hour.

Trying every 256bit number gets into a "slightly" larger problem.