XOR it *twice*
;-) > Date: Thu, 22 Oct 2009 11:41:59 -0500 > From: [email protected] > To: [email protected] > Subject: Re: [Pauldotcom] Bypassing Vontu > > No experience, but here's a few tactics to try. > > * Boot to a live disk & copy files to USB. > * encrypt data with truecrypt before sending it out. > * Open data in your text editor & replace a few common characters with a > symbol so that the data is somewhat garbled. > * upload data to a site using SSL encryption. > * Open data on screen & take pictures with your phone. > * Copy data in the notes section of your email contacts & then access from > outside. > * paste data into an email & then save as a draft (but don't send.) then open > draft from outside. > * print data to pdf & send out. > * open data on screen, take screen shots, and then email the screenshots. > * sync your phone with the computer & try to copy out. (not as a drive, as a > synced folder on the phone). > > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Monkey Daemon > Sent: Thursday, October 22, 2009 10:45 AM > To: PaulDotCom Security Weekly Mailing List > Subject: Re: [Pauldotcom] Bypassing Vontu > > 2009/10/22 Brian Schultz <[email protected]>: > > Our security department is testing out Symantec's Vontu and I am playing the > > guinea pig and have to try and get documents out of our company's > > environment. I have a really basic understanding of how it works. It has a > > span port sitting and listening to all outgoing web traffic and there is > > also an agent that sits on desktops and watches to see if any sensitive > > information leaves via USB drive or e-mail. > > > > Does anyone have any whitepapers or info regarding how it actually works or > > any tactics I should try? > > Switch off the box, open the case and walk out with the disk in your > briefcase/laptop bag? > > MWD
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
