On 20-10-2014 20:46, Ian Grant wrote: > There's analysis, and there's analysis. None of this is particularly > interesting without knowledge of what depth of analysis was being > done. Yes it is. Because filters can be made to alert you of odd traffic. And certainly a tcp syn to an http port which after the connection is established you start seeing a lot of vpn traffic. Or even they can specifically try to target the PSK in the ISN. There are lot's of things with this port knocking that they can look into, easily. > I doubt they were looking for steganographic transport encoding > in audio and image data, for example. Which has nothing to do with your proposal. And even so, I believe you couldn't make a vpn for real world traffic masquerade inside audio or video data. Hell, I don't even think that steganography work that well. But that's another matter entirely. > > And I said before, using WiFi cells, they simply won't have access to > all the traffic without snooping all the WiFi cells. And they would > have a hard time dealing with USBstickNet traffic. high-latency, but > massive bandwidth:-) Both do not have anything to do with your proposal. But I don't see why the 4G antennas couldn't have NSA or (insert your country agency name here) hardware to see every wireless network in their range. Which clients connect to them, and other things that the great unencrypted world of 802.11 management frames do for you. And since you need much more antennas for 4G in a crowded city, I bet they could cover effectively a very large area, if not the entire city. As for the USB, did you heard of badusb? It's bad. They specifically tell you not to share any stick with anyone because all that needs is one computer infected and your stick firmware becomes your worst enemy. I already said you and will say again. Want to help? Improve or implement strong cryptography properly. It's the only thing that can save us in the long term.
Cheers [demime 1.01d removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]
