Tag Info

New answers tagged

5

The EFF has a page describing how the information is encoded in those yellow dots: https://w2.eff.org/Privacy/printers/docucolor/ At the bottom of the page you will find a little javascript program you can use to decode them: https://w2.eff.org/Privacy/printers/docucolor/#program They also publish a list of printers which do not display those dots: ...


8

Yes. SSH has standardized and quite distinct handshake packets, so you can very easily detect an SSH session initiation. Here is a transcription of Wireshark capture of an SSH session initiation: Encrypted request packet len=41 Encrypted response packet len=39 Client: Key Exchange Init Server: Key Exchange Init Client: Diffie-Hellman Key Exchange Init ...


1

Whether this is a good idea or a bad idea really depends on what your requirements are and what threats/risks your trying to protect against. I think there are some signficant limitations with the practical aspects of this approach, such as ensuring your messages looks enough like spam that it is obscured, but not so much like spam that your recipients anti ...


7

Using steganography instead of encryption is a rather bad idea, especially when the tool used is freely available. Anybody could use it to uncover the message. However, simple encryption has a shortcoming when compared to steganography: Encrypted messages are usually identifiable as such, so while nobody knows what you send somebody, there is a proof you ...


10

The problem with this technique (with any kind of steganography, actually) is that it relies on security through obscurity. An eavesdropper who is aware of spammimic.com could easily train their surveillance system to recognize patterns which are typical for messages generated by spammimic, log them and extract their hidden payload. By the way: Using the ...


19

It would help if you elaborated on if you are defending from a targeted attack or just being cautious, and what vector the potential adversary would be using to eavesdrop. That being said, the method you are referring to is called 'security through obscurity', and is "… discouraged and not recommended by standards bodies." I would say that is putting ...



Top 50 recent answers are included