[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sync root passwords?



Once upon a time Andrew Perrin said...
> No, it's not more insecure; you're assuming the hypothetical hacker knows
> that there is an algorithm, and which character(s) are filled in by it.  

...and you're assuming that security through obscurity is just as secure
as a secure encryption algorithm.

In practice, it will make little difference. But it is less secure. You
are relying in keeping your algorithm secret. If it is found out, you've
reduced the keyspace to be searched to break the keys.



Reply to: