Obscurity is not security. Do you think otherwise?

[harrysung]

Using WordPress as an example, in a bid to protect websites from hackers, some WordPress site owners choose to disguise their website as though it was not built on WordPress. But I read online recently, that obscurity is not security i.e because you think no one can find out about the platform it's based upon, it makes you relax about your websites security, which is a very bad practice and that hackers have a professional means of still detecting what your website was built with.

My take is that obscurity should only be used only as an added layer of protection after all other means of protection has been employed.

what do you think

 

[Deleted member 4320]

It is a form of security but you shouldn't stop there.

Some people think that hiding an admin panel is enough when it isn't. You also need to make sure that users are authenticated and user input is sanitised amongst other things.