-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matthew Toseland wrote:
> It would probably be easier to lock down the entire network so that P2P
> is impossible. Yes you can identify traffic by session bytes and so on;
> but if we use steganography, they will have to do traffic *flow*
> analysis.

I think we both agree that stego is a necessity for the successful deplyment
in hostile places.

>>I'd also argue that false positives aren't that much of an issue in state 
>>regimes.
> 
> Maybe. It depends on what level of collateral damage is acceptable. E.g.
> it seems very unlikely that the Wall would block ssh.

I was thinking more in the lines of "trying to come in the graces of a suspect
and see if he agrees to have you join", or just plain old "hacking into
someone's computer/room/life and check that out"

>>While I tend do agree that usual social networks are small worlds, I'm not
>>convinced this specific darknet would become a small world by itself.
> 
> Well, it's a subset of a social network...

Still, that doesn't prove anything. A subnet of a network with given
proprieties doesn't necessarily have the same proprieties. Eg. a coverage tree
of the social network.
I for once think that, even if I would invite all the friends I think could be
interested, I wouldn't bother to look into finding more than one access nodes
to the (dark)network. I might be the only one tho :D

> Well, if we expose the topology, we give attackers an awful lot of
> information... 

This is what I thought too. So my doubts are still very valid.

> Worse, it's likely that the network will be a hybrid -
> some parts of it dark and some parts open.

Do I guess correctly that the open part would be fully connected? Then my
doubts do not really apply anymore. Not much, at least.

(is there anyone else interested in this topic? hello? anyone out there?)

So spoke I. And I might be wrong :D

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDQ+fuMiWEUf7YMGERAkYpAKC3Pka2WUZZtvupRUTOMnrsrKJthgCgsorj
xgPFxAaYFTov6KTuN6zcyy8=
=afW9
-----END PGP SIGNATURE-----

Reply via email to