3 ms·
> Even then there will almost always be evidence if you log network traffic. You'd need to know what to look for though. It was shown that the CIA can hide its
by MauranKilom 6y ago
> Even then there will almost always be evidence if you log network traffic.
You'd need to know what to look for though. It was shown that the CIA can hide its communication in metadata of legitimate traffic which is then recovered at intermediate hops to the target. So, do you know precisely what an innocent DNS packet looks like to detect this anomaly?
- hnarn 6y ago>do you know precisely what an innocent DNS packet looks like to detect this anomaly Wouldn't an abnormal amount of DNS data also stand out? I assume for this to work they'd still have to send a lot of data unless they're willing to wait for half an eternity. Just curious, since I hadn't heard of this before.
- didericis 6y agoI’d imagine it depends on what you’re trying to send out and the size of it.