How To Prevent Connection Tapping?

Full Version: How To Prevent Connection Tapping?

GovernmentSecurity.org > System Security > Networking Security / Firewall / IDS / VPN / Routers

MHSICKNESS

Jan 7 2005, 05:32 PM

For some reasons the police found it necasary to get a search warrant for my house, come-in and take some hdd's, cd's and usb-sticks.
After a week of interrigations i've made it home and its all ok now (i hope).
But they are still running an investigation against me and some other people although im not a main suspect in this case.

Now i've seen loads of documents about my and their case, they have managed to tap internet connections and tap phone calls of allot of the suspects (not me though).
I could be wrong though, but i've seen ALLOT of documents (about 5kg of them) from conversations at irc and msn all RAW so not taken from logs.

Since there's still an investigation I'm worried they have started tapping me to see if I mess-up and talk to much or something. Although I dont have much to hide from them the thought of them seeying everything I send over the internet just makes me mad

. I feel like i have no privacy left here.

So my question, is there any way to prevent them from getting to see everything i send (specially web-sites).
I've already taken steps to talk with blowfish encryption only on irc networks and thought of connecting through ssl.

Anyone with idea's.. I'm open for everything

DasmER

Jan 7 2005, 06:08 PM

Although i want to have nothing with police, i strongly believe in the right for privacy..A neat method for ensuring your privacy except for using PGP encryption for your emails, its the method of steganography..
I know a little about this subject but i find it quite impressive..Here are some links to use for reference other than google..

+Steganography Revealed

QUOTE

steganography can be used to maintain the confidentiality of valuable information, to protect the data from possible sabotage, theft, or unauthorized viewing

+Steganography: Hidden Data

QUOTE

Even if steganography is present, forensics experts prefer to start by investigating less complex areas. But in some cases, the only evidence might be hidden in image or sound files, so investigators need to be aware of steganography and the tools used to detect and crack it, say experts

+How Steganography Actually Works

If you search deep this subject and develop your own unique way to apply steganography, it will be very difficult for the forensics to discover.. The only drawback is that it cannot be used for transferring data onto websites..:/
I hope i have been helpfull to you..

buzzons

Jan 8 2005, 12:37 PM

what you could do is set up an SSH tunel to a remote server that forwards port 80 requests out, thus they would have to moniter that server and if you set it up over encrypted chat they would not know where it is

so all they would see is the SSH traffic going out (you could probably bounce the traffic over say 3 sites before hitting the one that forwards the traffic). This would mean the only time the info for the site goes in or out in plain text would be from some random server

-Buz

MHSICKNESS

Jan 12 2005, 08:25 AM

Thanks both for the great idea's.

Imma try it both.. hoping it's not impossible... will have to do some reading for getting these things set-up

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.


Help - Search - Member List - Calendar Full Version: How To Prevent Connection Tapping? GovernmentSecurity.org > System Security > Networking Security / Firewall / IDS / VPN / Routers MHSICKNESS Jan 7 2005, 05:32 PM For some reasons the police found it necasary to get a search warrant for my house, come-in and take some hdd's, cd's and usb-sticks. After a week of interrigations i've made it home and its all ok now (i hope). But they are still running an investigation against me and some other people although im not a main suspect in this case. Now i've seen loads of documents about my and their case, they have managed to tap internet connections and tap phone calls of allot of the suspects (not me though). I could be wrong though, but i've seen ALLOT of documents (about 5kg of them) from conversations at irc and msn all RAW so not taken from logs. Since there's still an investigation I'm worried they have started tapping me to see if I mess-up and talk to much or something. Although I dont have much to hide from them the thought of them seeying everything I send over the internet just makes me mad . I feel like i have no privacy left here. So my question, is there any way to prevent them from getting to see everything i send (specially web-sites). I've already taken steps to talk with blowfish encryption only on irc networks and thought of connecting through ssl. Anyone with idea's.. I'm open for everything DasmER Jan 7 2005, 06:08 PM Although i want to have nothing with police, i strongly believe in the right for privacy..A neat method for ensuring your privacy except for using PGP encryption for your emails, its the method of steganography.. I know a little about this subject but i find it quite impressive..Here are some links to use for reference other than google.. +Steganography Revealed QUOTE steganography can be used to maintain the confidentiality of valuable information, to protect the data from possible sabotage, theft, or unauthorized viewing +Steganography: Hidden Data QUOTE Even if steganography is present, forensics experts prefer to start by investigating less complex areas. But in some cases, the only evidence might be hidden in image or sound files, so investigators need to be aware of steganography and the tools used to detect and crack it, say experts +How Steganography Actually Works If you search deep this subject and develop your own unique way to apply steganography, it will be very difficult for the forensics to discover.. The only drawback is that it cannot be used for transferring data onto websites..:/ I hope i have been helpfull to you.. buzzons Jan 8 2005, 12:37 PM what you could do is set up an SSH tunel to a remote server that forwards port 80 requests out, thus they would have to moniter that server and if you set it up over encrypted chat they would not know where it is so all they would see is the SSH traffic going out (you could probably bounce the traffic over say 3 sites before hitting the one that forwards the traffic). This would mean the only time the info for the site goes in or out in plain text would be from some random server -Buz MHSICKNESS Jan 12 2005, 08:25 AM Thanks both for the great idea's. Imma try it both.. hoping it's not impossible... will have to do some reading for getting these things set-up This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.