full-disclosure - Re: Standing Up Against German Laws

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4740F8BF.5000008@hogyros.de>
Date: Mon, 19 Nov 2007 03:45:19 +0100
From: Simon Richter <Simon.Richter@...yros.de>
To: Florian Echtler <echtler@...tum.de>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>,
	Georg Schwarz <georg.schwarz@...enet.de>, imipak <imipak@...il.com>
Subject: Re: Standing Up Against German Laws -
	Project	HayNeedle

Hi,

Florian Echtler さんは書きました:

> Just to make myself clear: I don't think it is a viable option to create
> email noise, I just pointed out that it makes more sense than TCP/HTTP
> noise.

There is already enough email noise thanks to spam. It might make sense
to reply to some of it though, to create the illusion of a fully
connected network (i.e. poison the data).

> As for using encryption: the fact that communication has happened (with
> respect to email, at least) can't be hidden, at least not if one or both
> ends of the communication are with a big public email provider.

Well, it might make sense to finally get a standard for email headers
within the easily encryptable data bits, so the outer message headers
would show only communication between some gateway service and the
communications endpoint.

Of course, there is always the option of a P2P darknet. :-)

   Simon

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/