Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If your server is detected, that's a security vulnerability. You should never be able to identify the underlying technology of your stack or you open yourself to attack on any known vulnerabilities where as if your stack is unknown, then the vectors for attack are much less obvious.


Security through obscurity is not effective.


Yes it is, in fact it's better than nothing and will prevent some form of basic attacks.


and x-powered-by headers are worthless,why set them up?




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: