On Thu, Oct 3, 2019 at 2:28 PM Keith Medcalf <kmedc...@dessus.com> wrote
> On Thursday, 3 October, 2019 11:50, Fred Baker <fredbaker.i...@gmail.com> > wrote: > > A security geek would be all over me - "too many clues!". > > Anyone who says something like that is not a "security geek". They are a > "security poser", interested primarily in "security by obscurity" and > "security theatre", and have no clue what they are talking about. Keith, It's called "operations security" or "OPSEC." The idea is that from lots of pieces of insignificant information, an adversary can derive or infer more important information you'd like to deny to him. There's a 5-step process used by the U.S. Military but the TL;DR version is: if you don't have to reveal something, don't. IMO, anyone who thinks the folks who developed OPSEC don't have a clue is the one I find wanting. Regards, Bill Herrin -- William Herrin b...@herrin.us https://bill.herrin.us/
