Linus's Security Rant ... He has a point

The practice of security by obscurity has been long understood as not ideal and to be avoided, however nation-states have been doing such things on a grander scales for centuries successfully. Take the Stealth plane, a recognised contributor to the end of the cold war because it signified the widening weapons gap. Can you really discount something when it works but it's not best practice? 

With Virtualization coming more to the fore I think the emphasis should turn to software rather than OS. Because we will bundle as mush or as little OS as need to make that software run with our software which is abstracted away for everything else so in-effect will become less import to have an environment running one platform or another. IT Pro skills will turn more towards using tools rather than getting to know OS inside out. But this all presents interesting security challenges as complexity increases between the abstractions will this present more options to exploit vulnerabilities? This is were developers need to understand the impact of what they are writting more than ever and continue to examine their creations to continue to insure they are safe but not placing security into context by using DREAD evaluations to understand the level of risk.