wonderful new artical on the threat inhraent in security through obfuscation. Just because a page isn't listed dosn't stop google form finding it. Now im off to make sure my pages listed in robots.txt are secured.
http://www.securityfocus.com/columnists/224