comp.security.firewalls archive
Re: Anti-spyware at the Gateway
From: Sebastian Gottschalk <seppi@seppig.de>
Date: Tue Mar 14 2006 - 12:45:06 CET
Date: Tue Mar 14 2006 - 12:45:06 CET
Somebody. wrote:
> The fact that the site is allowed, and can be used to make a tunnel, doesn't
> prove that I can' find and detect the tunnel.
How would you like to differ a 128 bit hash value used as a session ID
from 128 Bit of encrypted data?
What about provable undetectable tunnels using steganographic embedding
of a provably undetectable covert channel?
> Oh wait, I forgot, tunnels are impossible to detect. Never mind.
Generelly yes.
Received on Mon May 1 00:57:27 2006