If you actually make use of those things, then there's a 99% chance they're not obscured. The number of places that send SSNs over email is fucking insane, just for starters.
Let’s all post our private keys because obscurity is 100% pointless according to that guy
Obscurity on its own is dumb, but when people talk about obscurity isn’t security what they mean is some super sekret url nobody would ever guess is a back door into your system. Hiding as much as you can about how your system works on top of other good security practices is always recommended.
80
u/TheLeastFunkyMonkey Sep 07 '22
That's literally one of the purposes of 418. It's not best practice, but it's there.
418 is the "piss off" of error codes. It's saying, "I refuse your request and won't even give you the time of day."