🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.crypt
Article #1008

Re: Paranoia over Spoofing

#1008
From: Robert Lewis Glendenning
Date: Sun, 27 Sep 1992 18:43
45 lines
2731 bytes
I believe that the intelligence agencies only manage to crack a small percentage
(maybe less than 1%) of all traffic. I have heard they save all traffic,
and that it takes a freight-car of tape per day.

It is not possible that they are intercepting all interesting traffic, even
though foreign military and intelligence traffic is a small percentage
(again less than 1%) of the interesting traffic of the world.

Now, Internet is in its infancy. It is already lots of megabytes per day.
If we include the private versions, certainly it is many 1000s of megabytes
per day.

So, at the time the world gets serious about networks, it will have gotten
serious about data and line security. All comm lines will be separately
encrypted. All mail, etc. will use at least one level of sophisticated
encryption.

From a cracker's point of view, this is horrid. They have to expend a lot of
effort to determine where files begin and end (due to the data link encryption),
and lots of those files are copies of the latest pinup sloshing around the
net.

I believe that no intelligence agency can handle the logistics. SPoofing is
supposed to be a way of circumventing these logistical problems, but even
sorting out the interesting traffic from all the chaf isn't going to
be easy.

Logistics also protects against spoofing, which has to be complete, or
even lousy security measures will detect it. There are thousands of nodes
on Internet. There will be millions when we get serious. The network will
be extremely dynamic. So, we only need a Consumer Report type group (or
perhaps several) to give a daily update of the number of attempted spoofs
against their test sites and mail to/from cooperating users. Once
procedures are published to test for spoofs, lots of people will do it
occassionaly and lots of internal security organizations will test
systematically.

So, IMHO, spoofing is something to be concerned about, but it is just another
annoying environmental factor, like viruses (both biological and computer).

Lew
-- 
Lew Glendenning		rlglende@netcom.com	408-245-7488

"Perspective is worth 80 IQ points."	Nils Bohr (or somebody like that).
Technical Details
Message-ID: <2v#p+rl.rlglende@netcom.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!know!hri.com!spool.mu.edu!olivea!decwrl!csus.edu!netcom.com!rlglende
References: <1992Sep7.142336.5733@ghost.dsi.unimi.it> <522128662DN5.61R@tanda.isis.org> <1992Sep23.195958.23615@cactus.org>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!know!hri.com!spool.mu.edu!olivea!decwrl!csus.edu!netcom.com!rlglende
From: rlglende@netcom.com (Robert Lewis Glendenning)
Newsgroups: sci.crypt
Subject: Re: Paranoia over Spoofing
Keywords: Spoofing, public keys
Message-ID: <2v#p+rl.rlglende@netcom.com>
Date: 27 Sep 92 18:43:16 GMT
References: <1992Sep7.142336.5733@ghost.dsi.unimi.it> <522128662DN5.61R@tanda.isis.org> <1992Sep23.195958.23615@cactus.org>
Distribution: na
Organization: Netcom - Online Communication Services  (408 241-9760 guest)
Lines: 45