Full Disclosure mailing list archives
Re: Interesting idea for a covert channel or I just didn't research enough?
From: Mario 'BitKoenig' Holbe <Mario.Holbe () TU-Ilmenau DE>
Date: Thu, 6 Oct 2005 14:43:46 +0200
PASTOR ADRIAN <M123303 () Richmond ac uk> wrote:
It works like this: the backdoor enables logging in the host-level = firewall for all dropped packets, say Windows XP SP2 Firewall. Then the =
Well, if the backdoor is able to enable logging in the packet filter (i.e. configure the packet filter) it should also be able to add some (as qualified as needed) pass rule, shouldn't it? This should be far less noisy, far less performance consuming and not more noticeable than the modification of other settings. regards Mario -- As a rule, the more bizarre a thing is, the less mysterious it proves to be. -- Sherlock Holmes by Arthur Conan Doyle _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Interesting idea for a covert channel or I just didn't research enough? PASTOR ADRIAN (Oct 06)
- Re: Interesting idea for a covert channel or I justdidn't research enough? phased (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? Bernhard Mueller (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? Mario 'BitKoenig' Holbe (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? Michael Holstein (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? Kevin Wilcox (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? mudge (Oct 06)
- Re: Interesting idea for a covert channel or I just didn't research enough? Jurjen Oskam (Oct 06)
- RE: Interesting idea for a covert channel or I justdidn't research enough? Aditya Deshmukh (Oct 07)
- Re: Interesting idea for a covert channel or I justdidn't research enough? Thierry Zoller (Oct 08)
- Re: Interesting idea for a covert channel or I justdidn't research enough? Jurjen Oskam (Oct 08)
- RE: Interesting idea for a covert channel or I justdidn't research enough? Aditya Deshmukh (Oct 07)
(Thread continues...)