11

An overt channel is a communications path that is not hidden. Anyone can see that Steve connected to Stack Exchange. A covert channel is an intentional communications path that is hidden, using a technique like steganography. This might use a technique like a dead drop, where I post a picture on eBay, you view the posting on eBay, but nobody can easily ...


4

DNS and ICMP are not good examples, because in a well configuration, network access is restricted by use of a proxy to thwart DNS and ICMP right from the start. But there‘s HTTP(S) still available through the proxy. Usually, websites are not whitelisted in a proxy, so this should work quite well. As to the content inspection: You can not do that in ...


2

This is a really good question and, ultimately, there’s definitely no way to know. At the end of the day, as a user, you need to make the decision to place trust in the developer, the infrastructure (Apple, Google, etc.), the hardware you’re using, and so on. Furthermore, there’s no way to detect that a device is listening or recording. You can place bets ...


2

Users can only rely on the word of the distributor of the app, which has proven problematic recently. There is no easy way to technically prove, that no audio is recorded, analyzed or transmitted.


2

It depends on what do you want to achieve: to hide the information that is being sent between the processes or the fact that they are communicating. If your goal is only to obtain confidentiality you can encrypt the information that is being sent between two or more processes. Prior to this you need to some background information on IPC(on both windows and ...


1

Some (most) malware needs a way to contact its master (the "C&C" as "Command and Control" -- a military expression). This can be to exfiltrate some confidential data that was plundered from the affected system, or, possibly, to obtain fresh information from the C&C, e.g. more commands to execute on the target. Most of the time, the malware wishes to ...


Only top voted, non community-wiki answers of a minimum length are eligible