It's obvious, but I've not seen it presented clearly before: the interesting bit for me was that if your attacker can see all the traffic on the network, tradit

It's obvious, but I've not seen it presented clearly before: the interesting bit for me was that if your attacker can see all the traffic on the network, traditional means of hiding a host (moving off a common port, and port knocking) don't do you any good because your attacker can see the traffic when you use it, and use that as leverage to acquire themselves an ORB. Normally you wouldn't assume that J. Random Skiddie has your router.