Announcement

**blackwave** · January 19, 2003, 19:30

Originally posted by astcell
Start using steganography and encryprion and all of a sudden YOU are the odd man out.

ummm... using steganography correctly, your average investigator should not be capable of determining if the data presented is the data or if there is something hidden... which is exactly the purpose of steganography... to hide in plain sight.

here is a simple example:
http://www.spammimic.com/
(copy and paste the below "spam" and decode the hidden message)

Dear Business person ; We know you are interested in
receiving amazing news . We will comply with all removal
requests . This mail is being sent in compliance with
Senate bill 1623 , Title 3 , Section 305 ! Do NOT confuse
us with Internet scam artists . Why work for somebody
else when you can become rich within 30 DAYS ! Have
you ever noticed the baby boomers are more demanding
than their parents and nobody is getting any younger
! Well, now is your chance to capitalize on this .
WE will help YOU process your orders within seconds
plus sell more . You can begin at absolutely no cost
to you . But don't believe us ! Mr Simpson who resides
in Arizona tried us and says "Now I'm rich many more
things are possible" . We assure you that we operate
within all applicable laws . You have no reason not
to act now ! Sign up a friend and you get half off
! God Bless . Dear Salaryman ; This letter was specially
selected to be sent to you ! If you are not interested
in our publications and wish to be removed from our
lists, simply do NOT respond and ignore this mail .
This mail is being sent in compliance with Senate bill
1624 , Title 3 , Section 304 ! This is different than
anything else you've seen ! Why work for somebody else
when you can become rich as few as 32 days . Have you
ever noticed more people than ever are surfing the
web & more people than ever are surfing the web . Well,
now is your chance to capitalize on this . We will
help you SELL MORE and increase customer response by
180% . You can begin at absolutely no cost to you !
But don't believe us . Ms Simpson of Indiana tried
us and says "My only problem now is where to park all
my cars" ! This offer is 100% legal . We implore you
- act now ! Sign up a friend and you'll get a discount
of 60% . Cheers . Dear Cybercitizen ; Especially for
you - this cutting-edge news ! We will comply with
all removal requests . This mail is being sent in compliance
with Senate bill 2116 ; Title 6 ; Section 305 ! This
is different than anything else you've seen ! Why work
for somebody else when you can become rich inside 38
weeks . Have you ever noticed more people than ever
are surfing the web and people are much more likely
to BUY with a credit card than cash ! Well, now is
your chance to capitalize on this ! WE will help YOU
sell more and deliver goods right to the customer's
doorstep . You can begin at absolutely no cost to you
. But don't believe us ! Ms Simpson who resides in
California tried us and says "Now I'm rich many more
things are possible" ! We are a BBB member in good
standing ! Do not delay - order today ! Sign up a friend
and you'll get a discount of 50% . Thank-you for your
serious consideration of our offer .

**Gadsden** · January 19, 2003, 19:37

I expected something more creative in the message.. :o

**astcell** · January 19, 2003, 19:47

I have used spammimic, but I block a lot of spam messages because of the common text.

**Stalker** · February 18, 2003, 08:48

Yeah steganography (horrible word to type) is the way forward but only if combined with encryption. Hiding in plain sight is a good method of hiding and translates well into the physical realm where if you act and look like you belong somewhere 9 times from 10 you'll be granted unchecked access.

I personally find encryption a pain in the arse because for email it means enrolling my friends into my way of thinking so it never happens. I used PGP for a while but only had a single regular contact that also used it.

**blackwave** · February 18, 2003, 08:54

opposite ends of the spectrum

Originally posted by Stalker
I personally find encryption a pain in the arse because for email it means enrolling my friends into my way of thinking so it never happens. I used PGP for a while but only had a single regular contact that also used it.

Most applications nowadays are pretty transparent to the user, no more are the days of copy and pasting public key blocks manually and running scripts... I use crypto all the time at work and at home... I only know a few people that do not have some type of public key.

**Stalker** · February 19, 2003, 02:00

While that's encouraging, I'm not talking about the software or key management being annoying. It's the fact that most of my friends, though quite computer literate, are not interested in using crypto. Also, large numbers of the email contacts I have are people using their company email addresses (for some, that's all they have access to) and they're not allowed to (or able to) modify their setup to use PGP.

So, my use of encryption systems is limited to environments where I don't need active involvement of another person. For example - IPsec on my home network, encrypted files on my drive. Oh, and when a friend installs Trillian (instant messaging client for windows) it's possible to enable an encrypted connection with them without action on their part.

**blackwave** · February 19, 2003, 09:00

more people should use crypto ... at least while they still can :) spread the word! :)

**Gadsden** · February 19, 2003, 09:56

Originally posted by blackwave
more people should use crypto ... at least while they still can :) spread the word! :)

But... that would help terrorists! They could communicate without the government knowing what they are plotting!
Oh wait.. they did it anyway.. and did not even have to use crypto! Better ban it anyway!

I am really suprised the government has not been pushing harder for key escrow, etc...

**blackwave** · February 19, 2003, 10:27

Originally posted by che
I am really suprised the government has not been pushing harder for key escrow, etc...

oh surely they are holding back... you see they want to make sure the US adopts the USNID which will enable the usage of PKI almost automagically... once the USNID is in place there is nothing much anyone can say.

**pezz** · February 19, 2003, 14:10

code in code

For your enjoyment-------------BW

Dear Professional , This letter was specially selected
to be sent to you . We will comply with all removal
requests ! This mail is being sent in compliance with
Senate bill 1618 ; Title 5 , Section 309 . This is
not a get rich scheme ! Why work for somebody else
when you can become rich inside 14 MONTHS . Have you
ever noticed how many people you know are on the Internet
and more people than ever are surfing the web . Well,
now is your chance to capitalize on this . WE will
help YOU deliver goods right to the customer's doorstep
plus use credit cards on your website . You are guaranteed
to succeed because we take all the risk ! But don't
believe us ! Mr Anderson who resides in Washington
tried us and says "I was skeptical but it worked for
me" ! We are a BBB member in good standing . You will
blame yourself forever if you don't order now ! Sign
up a friend and you get half off . Best regards . Dear
E-Commerce professional , This letter was specially
selected to be sent to you . If you no longer wish
to receive our publications simply reply with a Subject:
of "REMOVE" and you will immediately be removed from
our mailing list . This mail is being sent in compliance
with Senate bill 1627 , Title 4 ; Section 302 ! This
is different than anything else you've seen ! Why work
for somebody else when you can become rich as few as
65 MONTHS . Have you ever noticed people love convenience
and more people than ever are surfing the web . Well,
now is your chance to capitalize on this . WE will
help YOU turn your business into an E-BUSINESS and
deliver goods right to the customer's doorstep ! You
can begin at absolutely no cost to you . But don't
believe us ! Prof Anderson of Idaho tried us and says
"Now I'm rich, Rich, RICH" ! We are a BBB member in
good standing ! For the sake of your family order now
! Sign up a friend and you'll get a discount of 60%
. Cheers !

**blackwave** · February 19, 2003, 14:41

Originally posted by pezz
code in code

For your enjoyment-------------BW

plaintext says:
BW: YOU REALLY ROCK

... i know :) Thanks!

Solution:
1. caeser cipher shift 1
2. wrapped in Spam mimic

Announcement

More Crypto Applied

More Crypto Applied

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment