Author Archives: Loretta George

What We Really Mean by “Security by Obscurity” Say “security by obscurity” in a room full of engineers and you’ll get groans. Everyone knows it’s bad practice. Yet it keeps sneaking back in, usually wearing a nicer label. The idea … Continue reading →

There’s a quiet, persistent belief that creeps through organizations of every size—from scrappy startups to sprawling legacy enterprises. It goes something like this: if we just keep our systems secret enough, if we don’t tell anyone how our authentication works, … Continue reading →

There’s a quiet, stubborn myth that keeps resurfacing in cybersecurity circles—the idea that if you just keep your system’s guts secret, nobody can crack it. It feels like common sense. A thief can’t pick a lock they don’t know exists, … Continue reading →

The Quiet Lie We Tell Ourselves There is a quiet, persistent lie that circulates in development teams, IT departments, and even among seasoned security professionals. It goes something like this: “If no one knows how our system works, no one … Continue reading →

You’ve probably done it yourself. Moved the admin login to a weird URL, swapped SSH onto some random high port, or leaned on a homegrown encryption trick nobody’s cracked yet. It feels clever—like hiding a spare key inside a fake … Continue reading →

There’s a stubborn myth that keeps resurfacing in information security: if you just keep the details of your system secret, you’ll be safe. It’s a tempting shortcut. Instead of building layered defenses, you simply hide the blueprints, obscure the code, … Continue reading →