Security through obscurity is unfortunately much more common than people think: many interfaces are built on the premise that since they are a "closed system" they can ignore standard security practices. This paper ...

http://uninformed.org/?v=1&a=6&t=sumry