Hacker News new | ask | show | jobs
by bullen 1835 days ago
Not if it's open-source.

Security by obfuscation is generally not a good option if you can avoid it.

2 comments

If there are other vulnerabilities present, stack traces can be forced to dump all sorts of data like env variables and network information and maybe someone else's personal information.

I strongly urge everyone to hide their stack traces in production. This will reduce your application's attack surface.

>Security by obfuscation is generally not a good option if you can avoid it.

Of course, but obscurity increases security