Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> relying _only_ on obscurity

Until it gets obscure enough that we start calling it “public-key cryptography”. Guess the prime number I'm thinking of between 0 and 2↑4096 and win a fabulous prize!



If you replace "security by obscurity" with "Kerckhoffs's principle", yes, absolutely!

The problem with using regular everyday obscurity is that it usually has a small state space and makes for terrible security, but people will treat it like it is cleverly hidden and safe from attackers

If I guess the IPv4 you're thinking of between 0 and 2↑32, ready or not, you win a free port scan


As per another comment, we can scan a single port on every public IPv4 address in less than an hour.

Trying every 256bit number gets into a "slightly" larger problem.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: