Comment by acobster

> Probabilistic protections can be defeated if the information leaks out, but they are still effective and worth doing.

What is the argument here? Is there something about this randomization that distinguishes it from classic security through obscurity?