Thoughts on Security by Obscurity

This has not really been that normal a week for me, but at least another article made it into print. The June 2008 issue of TechNet Magazine is headlined by an article I wrote with my friend Roger Grimes, Security Adviser for Infoworld, on Security by Obscurity. It is another one of those point-counterpoint pieces like we did in the Vista Security book where Roger argues one side of the issue, and I explain why he is wrong; or, rather, argue the other.

Published 13 May 2008 10:46 AM by jesper
Filed under: ,

Comments

# Victor Constanstinescu - MVP said on 18 May, 2008 01:34 AM

Not sure why the talkback didn't work. Here it is: victor-youngun.blogspot.com/.../great-debate-security-by-obscurity.html

# markk02474@gmail.com said on 12 June, 2008 09:21 PM

Perhaps you can make Vista Firewall/NLA/RAS interactions less obscure? You gave a sample rule for VPN connections: netsh advfirewall firewall add rule name="Allow CIFS on VPN interfaces" dir=out action=allow enable=yes profile=public localIP=any remoteIP=any remoteport=445 protocol=TCP interfacetype=RAS

Now, if I use such rules on 5,000 user machines needing VPN access, won't DSL (PPPoE), and dialup connections also be considered RAS connections and  match? Some number of users will be exposed using their home connections, right?

Network Awareness is poorly documented. What's the algorithm? Its triggered when an interface comes up and uses DHCP and gateway mac address info, but will it be triggered when I use a 3rd party VPN client shim driver to connect? Will it notice the routing change and new default gateway?

I learned security through obscurity when I used the ITS operating system - some things haven't changed!

# markk02474@gmail.com said on 16 June, 2008 11:45 AM

Microsoft's security by obscurity:

"The API utilized to register a firewall with the WSC can be obtained by contacting Microsoft at wscisv@microsoft.com. A Non-Disclosure Agreement (NDA) is required for the disclosure of this API due to security concerns."

msdn.microsoft.com/.../bb190942(VS.85).aspx

Leave a Comment

(required) 
(required) 
(optional)
(required)