Really?
I thought everyone dropped "security by obscurity" long time ago.
I thought everyone dropped "security by obscurity" long time ago.
You want a unique bug that will last a long time. In which case, your fuzzing techniques are a trade secret. A lot of fuzzing advances take place behind closed doors.
Project Zero has some people with interesting backgrounds doing bug hunting for good.
I figure they're selling exploits (the ones they don't publicise) to governments.
Obscurity is effective as one layer in a layered defense.
"Defense in depth".