From: khijol!erc@apple.com (Ed Carp)
Date: Tue, 6 Jul 93 19:32:17 PDT
To: mccoy@ccwf.cc.utexas.edu (Jim McCoy)
Subject: Re: On the medium being the message
In-Reply-To: <199307070119.AA23872@tigger.cc.utexas.edu>
Message-ID: <m0oDPFd-00022fC@khijol>
MIME-Version: 1.0
Content-Type: text


> > [...] This set off a whole train of thought on
> > message concealibility, like hiding messages in, say, the order of headers
> > in a posting, or the "Reply-To:" header, or even the words in subsequent
> > postings to a newsgroup.  Who would ever think to look at, say, the third
> > word in every posting Tim makes to alt.whatever newsgroup?  Or in the "Date:"
> > field, or in the "Message-ID:" field, or ... or ... or ...
> 
> Not much bandwidth in that medium there...
> 
> Things like gif/jpeg images and sound files have a ton of semi-random bits
> in them that you can fool around with without anyone noticing much, but
> plain text in news headers and postings just doesn;t leave one with much
> room for putting in a message.  At least not without being blanently
> obvious... 

True, but how much do you need if you have code dictionaries?  The Message-ID
field, for example, could contain a page.word reference, one that meant
"the cops are watching me, be careful", or "Nuclear detonator received".
Not much the NSA could do to figure that one out unless they had searched
your place, or knew a HELL of a lot about you and your co-conspirator.

My point was, there are a lot of covert channels that one can use without
making it obvious that there is any sort of covert data being passed.
-- 
Ed Carp				erc@wetware.com			510/659-9560
   For anonymous mailers -->   anonymus+5300@charcoal.com
"I've met many thinkers and many cats, but the wisdom of cats is infinitely
 superior."      -- Hippolyte Taine  (1828-1893)