Re: [tor-dev] GSoC project idea: pluggable transport that hides data in TCP SEQ numbers / UDP SRC ports

2014-01-10 Thread Andreas Krey
On Fri, 10 Jan 2014 00:19:32 +, Jim Rucker wrote: > This is an attempt at security though obscurity, I think you mean 'nondiscoverability through obscurity'; transport security would be in a different layer. What is tunneled in an obscure way is still the regular tor protocol which provide enc

Re: [tor-dev] GSoC project idea: pluggable transport that hides data in TCP SEQ numbers / UDP SRC ports

2014-01-09 Thread Jim Rucker
This is an attempt at security though obscurity, which doesn't work well in open source projects. On Tue, Jan 7, 2014 at 10:09 AM, George Danezis wrote: > Hello Jacek and all, > > Before, going down this path I would recommend reading the very relevant > works: > > *Embedding Covert Channels in

Re: [tor-dev] GSoC project idea: pluggable transport that hides data in TCP SEQ numbers / UDP SRC ports

2014-01-07 Thread George Danezis
Hello Jacek and all, Before, going down this path I would recommend reading the very relevant works: *Embedding Covert Channels into TCP/IP* *Steven J. Murdoch, Stephen Lewis * It is commonly believed that steganography within TCP/IP is easily achieved by embedd

Re: [tor-dev] GSoC project idea: pluggable transport that hides data in TCP SEQ numbers / UDP SRC ports

2014-01-07 Thread Ian Goldberg
On Tue, Jan 07, 2014 at 06:41:02AM -0800, Jacek Wielemborek wrote: > Hi, > > I recently had an opportunity to watch David Fifield's lightning talk on > pluggable transports that he gave on 30C3. I find the topic fascinating and > I'm > considering an application to your project for the upcoming

[tor-dev] GSoC project idea: pluggable transport that hides data in TCP SEQ numbers / UDP SRC ports

2014-01-07 Thread Jacek Wielemborek
Hi, I recently had an opportunity to watch David Fifield's lightning talk on pluggable transports that he gave on 30C3. I find the topic fascinating and I'm considering an application to your project for the upcoming Google Summer of Code. My idea is a bit complicated - I'd like to create a pl