3 ms·
You can just encrypt your stuff and upload it via http. You can even run ssh over http if you work at it. Encryption is as easy as using zip. And if you upload
by ars 2y ago
You can just encrypt your stuff and upload it via http. You can even run ssh over http if you work at it.
Encryption is as easy as using zip. And if you uploaded a very large file, they can't realistically log it - so you could even upload it in the clear and it won't be caught unless they are specifically looking.
- MattPalmer1086 2y agoWe scan all file uploads and block encrypted files. Your move.
- ars 2y agoI challenge you to automatically tell the difference between an encrypted file with a fake header and a jpeg. A human could see it's not a real image, a tool would not. And that's not even getting into steganography - just literally add a jpeg header to the encrypted file and it will fool most things. Or any kind of streaming upload. The thing about media compression is that the compression process leads to a file that looks 100% random, an encrypted file also looks that way.
- MattPalmer1086 2y agoYeah, you would probably get past it like that, good one. Steganography could also be used to exfiltrate data. The point of these systems though isn't to stop a determined attacker on the inside. It's to prevent people foolishly, accidentally, or intentionally (because they're lazy) from sending potentially sensitive data out. This happens all the time.