To reply, no, privacy isn't entirely lost. There are capabilities within the SMTP protocol that permit (for sake of better terms) "piggybacking" in which text-based steganography *may* be utilized. The proof-of-concept is tedious and slow, but I have written a whitepaper that *could* show how it could be done.

The whitepaper was recently submitted to ACM for possible inclusion in their next publication in Fall, 2004.

For more information, please visit the web site. The whitepaper is located here:

http://www.unixworks.com/papers/wp-010.pdf

Enjoy!

Bob Radvanovsky [/unixworks]
rsradvan(at)unixworks(dot)com
"knowledge squared is information shared."

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/258/27783#27783