1994-02-08 - Re: STEG: a real-life use for steganography

Header Data

From: paul@poboy.b17c.ingr.com (Paul Robichaux)
To: karn@qualcomm.com (Phil Karn)
Message Hash: 733f5c699c360e3eb45b165638009073ac7d77cb9d16c117d2dd0f59ebe3e4dc
Message ID: <199402081509.AA17293@poboy.b17c.ingr.com>
Reply To: <199402080707.XAA24919@servo.qualcomm.com>
UTC Datetime: 1994-02-08 15:10:51 UTC
Raw Date: Tue, 8 Feb 94 07:10:51 PST

Raw message

From: paul@poboy.b17c.ingr.com (Paul Robichaux)
Date: Tue, 8 Feb 94 07:10:51 PST
To: karn@qualcomm.com (Phil Karn)
Subject: Re: STEG: a real-life use for steganography
In-Reply-To: <199402080707.XAA24919@servo.qualcomm.com>
Message-ID: <199402081509.AA17293@poboy.b17c.ingr.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

> There's a practical problem here. Audio CD players generally provide
> no easy way to get the raw bits into a computer (SPDIF interface cards
> exist for PCs, but they're rare and expensive). And I haven't yet
> figured out how to get a CD-ROM drive to read the raw bits off an
> audio CD; I suspect it requires munging the firmware in the drive,
> which makes anything you do highly manufacturer specific.

Apple's CD-300/300i drives can read audio bits directly and turn them
into a QuickTime sound channel, as can SGI's SCSI CD. Apple uses a
Sony mechanism, and SGI uses a Toshiba. The SGI drives use modified
firmware and (AFAIK) are not available elsewhere, but you can get the
Apple drives at Circuit City, Sears, etc.

With the right sequence of SCSI commands you could easily capture an
"audio" bitstream, then munge it as desired to extract the stegged
data, play it backwards, or whatever. IIR, code to directly read
arbitrary audio data on an Apple CD-ROM was recently posted in
comp.sys.mac.programmer, but I didn't save it.

- -Paul

- -- 
Paul Robichaux, KD4JZG     | "Though we live in trying times 
perobich@ingr.com          |  We're the ones who have to try." - Neil Peart
Intergraph Federal Systems | Be a cryptography user- ask me how.
	       Of course I don't speak for Intergraph.

-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLVen7SA78To+806NAQG3sAQAu8prXRUkJKWwmQBIeJxwQIDK+2ilvyxe
24rcK89EInIyEdLnsSrx4uly3CBpS7iWdOmoAQ9tNu5tOOi3xc+5W5cvUTJ4t/NR
gblnKM/qevO6PCdQFiJXNgzg/1DkY2LsrvnH3I+8lxXeNn06CQKB85r5COY2vL3I
ldqrGjLScHU=
=GjEo
-----END PGP SIGNATURE-----





Thread