Email tapping by ISPs, forwarder addresses, and crypto proxies

[Eugen Leitl]

On Tue, Jul 20, 2004 at 08:55:36PM -0700, Major Variola (ret) wrote:

> The thread was about wiretapping.  My point was that you can record
> at linespeed an analyze at leisure.  Nothing more, nothing less.

This makes no sense. Most of the traffic out there is garbage, and it is
ridiculously expensive to record all of it. It is not at all difficult to
analyze it, and extract useful info: all plain text information, which
endpoints use which crypto, VoIP streams, etc.

We *do* remember the Pakistan-UK email on wire intercept, don't we? How else
is this supposed to have happened by means other than a total tap?

You better believe they're doing it -- but they capture only traffic that
contains useful information.

--
Eugen* Leitl <a href="http://leitl.org">leitl</a>
______________________________________________________________
ICBM: 48.07078, 11.61144            http://www.leitl.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
http://moleculardevices.org         http://nanomachines.net

[demime 1.01d removed an attachment of type application/pgp-signature]