I have no doubt that it will be used with the best of intentions (can we really be that cynical to think that any government really wants an Orwellian-regime?), but that doesn't make it any less of an accident waiting to happen.

Even if, say, the worm uses T-DES or better encryption to hide both its enterance (backdoor-handshake authentication, since we are going on the company complicancy side) and intent/output... how long until the encryption is hacked... or better, how long until carnivore itself is hacked and we have rogue I-R bots out there that look almost just like the FBI? (I'm actually curious on this because I really don't know the chances of someone reverse engineering carnivore, but come from the school of --if its out there.. it will or at least can be done--)


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/44/9225#9225