Mark
CreativeMountainGames.com
Jarrod said:This is somewhat off-topic, but it needs to be said.
The security of Linux vs. Windows has nothing to do with obscurity. It has to do with fundamental system design.
Windows: a system that was originally designed for a workplace; easy sharing of resources is key, and so the system is open.
Linux: a system based on old time-sharing UNIX servers, where sharing was explicitly not the point. So the system is closed.
Obscurity is not a replacement for a good security system, but it helps. In fact, the best thing you can have is both. Make it hard to find the holes and then make it hard to exploit them. Think about it for a second - of course making something harder to find makes it harder to exploit. Problem is, once it's found (and thanks to easy communication and automation) then the obscurity part doesn't help anymore.
"Security through Obscurity" is a bad idea - because there's no security and only one person has to get "lucky". Security _and_ obscurity is best.
(and I'm a security researcher in real life)
Good to hear from a professional. You should exchange emails with MM, if you have time, and throw any extra tips or help you can toward making each successive year better than the previous one.