Re: huawei

2013-06-15 Thread Jimmy Hess
On 6/14/13, Scott Helms khe...@zcorum.com wrote: Is it possible? Yes, but it's not feasible because the data rate would be too low. That's what I'm trying to get across. There are lots things that can be done but many of those are not useful. [snip] I agree that the data rate will be low. I

Re: Prism continued

2013-06-15 Thread Måns Nilsson
Subject: Re: Prism continued Date: Wed, Jun 12, 2013 at 05:13:45PM -0700 Quoting Scott Weeks (sur...@mauigateway.com): or cat /var/log/router.log | egrep -v 'term1|term2|term3' | less Surely you mean egrep -v 'term1|term2|term3' /var/log/router.log | less

Re: huawei

2013-06-15 Thread Eugen Leitl
On Fri, Jun 14, 2013 at 07:51:22PM -0400, Scott Helms wrote: Really? In a completely controlled network then yes, but not in a production system. There is far too much random noise and actual latency for that to be feasible. The coding used for the stegano side channel can be made quite

Re: huawei

2013-06-15 Thread Eugen Leitl
On Fri, Jun 14, 2013 at 08:34:49PM -0400, Scott Helms wrote: Is it possible? Yes, but it's not feasible because the data rate would be too low. That's what I'm trying to get across. There are lots things that can be done but many of those are not useful. I could encode communications in

Re: huawei

2013-06-15 Thread Scott Helms
With the CPU and RAM available in a router that has to actually continue functioning at the same time? Exactly how much data through put would you consider to be usable in this scenario? Again, my point is not that its impossible but that all these things are impractical AND there are

Re: huawei

2013-06-15 Thread Scott Helms
I can't agree Jimmy, I don't see a few bps being anywhere close to being useful in any of the scenarios your describe especially because there are easier ways of doing those things. To do any of that the first thing you have to do is establish the CC channel so now you have a very low bit rate

Re: huawei

2013-06-15 Thread Jimmy Hess
On 6/15/13, Scott Helms khe...@zcorum.com wrote: They're terrible places for gathering non-targeted information because the amount of data flowing through them means that that the likelihood of any give packet having any value is very very low. If the goal includes [snip] The probability of

Re: huawei

2013-06-15 Thread Scott Helms
Jimmy, This I agree with and in fact I said in earlier parts of this conversation that the existence of a kill switch and/or backdoor in Huawei gear wouldn't surprise me at all. Of course I'd say the same thing about pretty much all the gear manufacturers and its really just a question of who

Re: huawei

2013-06-15 Thread Rich Kulawiec
First: this is a fascinating discussion. Thank you. Second: On Sat, Jun 15, 2013 at 01:56:34AM -0500, Jimmy Hess wrote: There will be indeed be _plenty_ of ways that a low bit rate channel can do everything the right adversary needs. A few bits for second is plenty of data rate for

Re: huawei

2013-06-15 Thread Michael Thomas
On 06/15/2013 05:13 AM, Rich Kulawiec wrote: First: this is a fascinating discussion. Thank you. Second: On Sat, Jun 15, 2013 at 01:56:34AM -0500, Jimmy Hess wrote: There will be indeed be _plenty_ of ways that a low bit rate channel can do everything the right adversary needs. A few bits

Re: huawei

2013-06-15 Thread Randy Bush
i wonder if and how many governments are worried about when the nsa tells cisco to send the kill switch signal to their routers. randy

Re: huawei

2013-06-15 Thread joel jaeggli
On 6/15/13 5:35 PM, Randy Bush wrote: i wonder if and how many governments are worried about when the nsa tells cisco to send the kill switch signal to their routers. Having worked for an Israel-based security vendor I'd opine: A. That many sovereign states are concerned about sourcing for

Re: huawei

2013-06-15 Thread cb.list6
On Sat, Jun 15, 2013 at 8:35 AM, Randy Bush ra...@psg.com wrote: i wonder if and how many governments are worried about when the nsa tells cisco to send the kill switch signal to their routers. randy What kill switch ? http://www.cisco.com/en/US/products/csa/cisco-sa-20090325-udp.html

Re: huawei

2013-06-15 Thread Jay Ashworth
- Original Message - From: Scott Helms khe...@zcorum.com Is it possible? Yes, but it's not feasible because the data rate would be too low. That's what I'm trying to get across. There are lots things that can be done but many of those are not useful. I could encode communications

Re: huawei

2013-06-15 Thread Jay Ashworth
- Original Message - From: Jazz Kenny trapperjohn...@gmail.com What about through SDR? ie. http://nuand.com/ I mean, 'subscriber' seems to indicate a layman, but SDR isn't too complex to get running for someone with a modicum of electronics experience - especially in this day and

Re: Prism continued

2013-06-15 Thread Matthew Petach
On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis jle...@lewis.org wrote: On Wed, 12 Jun 2013 goe...@anime.net wrote: cellphones with cameras are probably better for the purposes of covert mass surveillance, especially ones with front facing cameras. far more of them out there, and wireless to

Re: Prism continued

2013-06-15 Thread Mark Gauvin
Only victim in all of this is the poor NSA contractor who had to sift thru my browser history Sent from my iPhone On 2013-06-15, at 4:24 PM, Matthew Petach mpet...@netflight.com wrote: On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis jle...@lewis.org wrote: On Wed, 12 Jun 2013 goe...@anime.net

Re: Prism continued

2013-06-15 Thread Randy
...yes indeed given smella-vision ;-) ./Randy --- On Sat, 6/15/13, Mark Gauvin mgau...@dryden.ca wrote: From: Mark Gauvin mgau...@dryden.ca Subject: Re: Prism continued To: Matthew Petach mpet...@netflight.com Cc: nanog@nanog.org nanog@nanog.org Date: Saturday, June 15, 2013, 2:28 PM Only

Re: huawei

2013-06-15 Thread Jazz Kenny
What about through SDR? ie. http://nuand.com/ I mean, 'subscriber' seems to indicate a layman, but SDR isn't too complex to get running for someone with a modicum of electronics experience - especially in this day and age, where oscilloscopes and frequency analysis is available to anyone with

Spam to NANOG-specific email addresses?

2013-06-15 Thread Jima
Esteemed colleagues, Did anyone else get a Twitter invite from @washsuntimes to their NANOG-use-only email addresses? Granted, mine was with my old one, but it was still very much specific to this list. Maybe not the best place to harvest addresses. Jima