I read
this paper here called "
Security and Obscurity." It was presented to me as "controversial," I tried really hard to find controversy, but failed to do so :-) I think it states the obvious - security BY obscurity - sucks; security WITH obscurity - works wonders ...