<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Jul 18, 2014 at 9:19 AM, Dave Howe <span dir="ltr"><<a href="mailto:davehowe.pentesting@gmail.com" target="_blank">davehowe.pentesting@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="">
<div>On 18/07/2014 08:08, Grégory Alvarez
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<div> Steganography on a piece of paper? A problem
with the dictionary approach is that the text does not
look like a normal letter. The censors may not be able to
read it, but they can see that the text stands out. A
phrase like "uncomplimentary threateningly. conceptually
secures on pockiest" does not look like something you
would place in a letter to grandma...</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"></blockquote>
<div><br>
</div>
<div>Yes this is a problem I am working on. I have some
ideas how to solve it but nothing very effective right
now. Any suggestions are welcome.</div>
</div>
</div>
</div>
</blockquote></div>
Seen an approach to this that relied on transcribing existing text
and choosing synonyms for the words such that the original meaning
was preserved; downside was it was a really low bandwidth channel,
with only a couple of bits per altered word and not every word
capable of being altered in a sentence without completely changing
the meaning.</div></blockquote><div><br></div><div>Interesting.... at first I considered this to be less than ideal but</div><div>as soon as I let go of the idea that it must apply universally I </div><div>started to think of ways to make it work for me. Then it was </div>
<div>more interesting.</div><div><br></div><div>Two individuals could use it to pass hints to select one of many stronger</div><div>codes or pass pass phrases to one time use PGP keys.<br></div><div><br></div><div>In the modern twitter world I can see short but transformed messages</div>
<div>used well.</div><div><br></div><div>Business secrets could not be unlocked from a cloud resource without</div><div>a short term key. </div><div><br></div><div>In a world where you can be compelled to divulge a key, businesses</div>
<div>might need to be a way to have a traveler travel without the key and then with</div><div>a rehearsed phone, text, twitter Turing test like interaction pass then using a</div><div>tool like this the keys needed are bootstrapped.</div>
<div><br></div><div>Dictionaries could include old or new international code books..... Like:</div><div><a href="http://howwethink.nkhayles.com/codebooks/texts/">http://howwethink.nkhayles.com/codebooks/texts/</a><br></div>
<div>to improve things.</div><div><br></div><div>These old codebooks had a good deal of thought hidden in them</div><div>and should not be ignored. Note that they like any data management </div><div>and control system can be used well or badly. </div>
<div><br></div><div>For many Rot13 + compress is sufficient. But how to make Rot13+compress</div><div>and PGP1024bit+compress look the same to a reader.</div><div><br></div><div>The meta data issue for communication is however bigger today.</div>
<div>Static data vs. communication traffic domains need not overlap </div><div>and can have different answers.</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div>
<div><br></div><div><br></div><div> <br></div></div><div><br></div>-- <br><div dir="ltr"> T o m M i t c h e l l</div>
</div></div>