> Nothing you do will be 100%, unless you unplug from the net. So. you
> need to decide how much risk you are willing to take. 

Yes, and in fact there are some academic papers out there that
establish this pretty convincingly.  This problem is well studied in
the context of trying to prevent prisoners from passing messages to
one another without being detected.  I've also read papers on how
communication can be achieved just through the timing delays of
packets sent on innocuous data transfers.  If you assume the person 
inside can set up a service outside of the link, there's always a way
to tunnel through.

With that said, there are many legitmate reasons to attempt to filter
traffic to protect people from malicious sites and to try to keep
people from getting distracted at work.  But really, it all just comes
down to a best-effort compromise where you just decide how much effort
is reasonable to keep honest people honest most of the time.

tim
_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to