Spam to NANOG-specific email addresses?

2013-06-15 Thread Jima
Esteemed colleagues, Did anyone else get a Twitter invite from @washsuntimes to their NANOG-use-only email addresses? Granted, mine was with my old one, but it was still very much specific to this list. Maybe not the best place to harvest addresses. Jima

Re: huawei

2013-06-15 Thread Jazz Kenny
What about through SDR? ie. http://nuand.com/ I mean, 'subscriber' seems to indicate a layman, but SDR isn't too complex to get running for someone with a modicum of electronics experience - especially in this day and age, where oscilloscopes and frequency analysis is available to anyone with some

Re: Prism continued

2013-06-15 Thread Randy
...yes indeed given smella-vision ;-) ./Randy --- On Sat, 6/15/13, Mark Gauvin wrote: > From: Mark Gauvin > Subject: Re: Prism continued > To: "Matthew Petach" > Cc: "nanog@nanog.org" > Date: Saturday, June 15, 2013, 2:28 PM > Only victim in all of this is the > poor NSA contractor who had to

Re: Prism continued

2013-06-15 Thread Mark Gauvin
Only victim in all of this is the poor NSA contractor who had to sift thru my browser history Sent from my iPhone On 2013-06-15, at 4:24 PM, "Matthew Petach" wrote: > On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis wrote: > >> On Wed, 12 Jun 2013 goe...@anime.net wrote: >> >> cellphones with cam

Re: Prism continued

2013-06-15 Thread Matthew Petach
On Thu, Jun 13, 2013 at 7:20 AM, Jon Lewis wrote: > On Wed, 12 Jun 2013 goe...@anime.net wrote: > > cellphones with cameras are probably better for the purposes of covert >> mass surveillance, especially ones with front facing cameras. far more of >> them out there, and wireless to boot. >> >> s

Re: huawei

2013-06-15 Thread Jay Ashworth
- Original Message - > From: "Jazz Kenny" > What about through SDR? ie. http://nuand.com/ > > I mean, 'subscriber' seems to indicate a layman, but SDR isn't too complex > to get running for someone with a modicum of electronics experience - > especially in this day and age, where oscillo

Re: huawei

2013-06-15 Thread Jay Ashworth
- Original Message - > From: "Scott Helms" > Is it possible? Yes, but it's not feasible because the data rate would be > too low. That's what I'm trying to get across. There are lots things that > can be done but many of those are not useful. > > I could encode communications in firework

Re: huawei

2013-06-15 Thread cb.list6
On Sat, Jun 15, 2013 at 8:35 AM, Randy Bush wrote: > i wonder if and how many governments are worried about when the nsa > tells cisco to send the kill switch signal to their routers. > > randy > What kill switch ? http://www.cisco.com/en/US/products/csa/cisco-sa-20090325-udp.html http://tools.

Re: huawei

2013-06-15 Thread joel jaeggli
On 6/15/13 5:35 PM, Randy Bush wrote: i wonder if and how many governments are worried about when the nsa tells cisco to send the kill switch signal to their routers. Having worked for an Israel-based security vendor I'd opine: A. That many sovereign states are concerned about sourcing for reas

Re: huawei

2013-06-15 Thread Randy Bush
i wonder if and how many governments are worried about when the nsa tells cisco to send the kill switch signal to their routers. randy

Re: huawei

2013-06-15 Thread Michael Thomas
On 06/15/2013 05:13 AM, Rich Kulawiec wrote: First: this is a fascinating discussion. Thank you. Second: On Sat, Jun 15, 2013 at 01:56:34AM -0500, Jimmy Hess wrote: There will be indeed be _plenty_ of ways that a low bit rate channel can do everything the right adversary needs. A few bits fo

Re: huawei

2013-06-15 Thread Rich Kulawiec
First: this is a fascinating discussion. Thank you. Second: On Sat, Jun 15, 2013 at 01:56:34AM -0500, Jimmy Hess wrote: > There will be indeed be _plenty_ of ways that a low bit rate channel > can do everything the right adversary needs. > > A few bits for second is plenty of data rate for se

Re: huawei

2013-06-15 Thread Scott Helms
Jimmy, This I agree with and in fact I said in earlier parts of this conversation that the existence of a kill switch and/or backdoor in Huawei gear wouldn't surprise me at all. Of course I'd say the same thing about pretty much all the gear manufacturers and its really just a question of who has

Re: huawei

2013-06-15 Thread Jimmy Hess
On 6/15/13, Scott Helms wrote: > They're terrible places for gathering non-targeted information because the > amount of data flowing through them means that that the likelihood of any > give packet having any value is very very low. If the goal includes [snip] The probability of a low-likeliho

Re: huawei

2013-06-15 Thread Scott Helms
I can't agree Jimmy, I don't see a few bps being anywhere close to being useful in any of the scenarios your describe especially because there are easier ways of doing those things. To do any of that the first thing you have to do is establish the C&C channel so now you have a very low bit rate bi

Re: huawei

2013-06-15 Thread Scott Helms
With the CPU and RAM available in a router that has to actually continue functioning at the same time? Exactly how much data through put would you consider to be usable in this scenario? Again, my point is not that its impossible but that all these things are impractical AND there are easier/fast

Re: huawei

2013-06-15 Thread Eugen Leitl
On Fri, Jun 14, 2013 at 08:34:49PM -0400, Scott Helms wrote: > Is it possible? Yes, but it's not feasible because the data rate would be > too low. That's what I'm trying to get across. There are lots things that > can be done but many of those are not useful. > > I could encode communications

Re: huawei

2013-06-15 Thread Eugen Leitl
On Fri, Jun 14, 2013 at 07:51:22PM -0400, Scott Helms wrote: > Really? In a completely controlled network then yes, but not in a > production system. There is far too much random noise and actual latency > for that to be feasible. The coding used for the stegano side channel can be made quite rob

Re: Prism continued

2013-06-15 Thread Måns Nilsson
Subject: Re: Prism continued Date: Wed, Jun 12, 2013 at 05:13:45PM -0700 Quoting Scott Weeks (sur...@mauigateway.com): > or "cat /var/log/router.log | egrep -v 'term1|term2|term3' | less" Surely you mean egrep -v 'term1|term2|term3' /var/log/router.log | less (http://partmaps.org/era/unix/awa