Re: Screening Outgoing Mail for Content

["Dave O'Shea" <daveoshea () email msn com>]

-----Original Message-----
From: Thomas Schiavinato <tschiavi () advsys com>
To: perry () piermont com <perry () piermont com>
Cc: firewall-wizards () nfr net <firewall-wizards () nfr net>
Date: Wednesday, August 05, 1998 4:05 PM
Subject: Re: Screening Outgoing Mail for Content


> According to Perry E. Metzger:
> > Users smart enough to use a scanner can send out GIF's of sensitive
> > documents without you being able to detect it via automation.
>
> "Sufficiently determined" detectors can decode common graphic formats
> and pump them through OCR software.  Even designs typically have
> textual labels you can key on.
>
> However, you are right. "Smart" users can employ steganographic
> techniques to hide data in the images.


A guy with a briefcase could do more damage than all the hackers in the
world. Or an envelope and a 32 cent stamp. Or a fax machine. Or a copier.