Text 13654, 80 rader
Skriven 2005-06-19 21:59:00 av Jeff Binkley (1:226/600)
     Kommentar till en text av Gary Braswell
Ärende: KEEP THE PATRIOT ACT
============================
GB> JM>> More at:
GB> JM>> http://news.com.com/Your+ISP+as+Net+watchdog/2100-1028_3-574864
GB> JM>> 9.html

GB> JB> This is impossible with today's technology.  It doesn't scale to
GB> JB> provide the level of detail necessary to actually provide
GB> JB> anything beyond IP address connected to another IP address on a
GB> JB> specific port number at a specific time.  They don't have the
GB> JB> capability to record session level data and encryption
GB> JB> technologies like SSL make it nearly impossible, except under
GB> JB> some very specific conditions.  I believe the letter you
GB> JB> forwarded was a hoax.

GB>Depends on how its implemented.

GB>ISP's can get into your email when they want, they can even place
GB>your account under surveillance. Email can also easily be forwarded
GB>to another address without the user even being aware. Unless of
GB>course you use a third party encryption program. Then they would have
GB>a hard time understanding the email.

Run your own mail server.  Thus they would have to intercept all port 25 
and 110 traffic.  Use TLS and encrypt it with SSL.  


GB>FTP is easy to crack. Of course you could use SSH.

Encrypt the payload.  Again they would have to monitor all port 21 and 
port 22 traffic on their network to do this.  It can be done but it is a 
big task.  


GB>Spyware often routinely keeps track of where you surf, some ISP's
GB>even have software you can install that keeps track of your average
GB>connection speed to websites you travel too. They can easily set that
GB>up without you even being aware.

Use programs like Adware to stop Spyware.


GB>As I am sure you know, SSL is not engaged and operating in most of
GB>your web activity.

Yes, most ISPs attempt to proxy HTTP either directly or via WCCP.  E-
mail and basic HTTP can be done fairly easily with current technology.  
SSL and many other protocols are much harder to do because the ISP 
doesn't have a proxy or server to use as a monitor point.
   

GB>Instant messengers are buggy as heck and have had all sorts of
GB>security problems with people being able to take over accounts, or
GB>have simple keystroke copiers send text to them of what you type.

GB>And as you pointed out, they can find out where you go through IP's,
GB>then request the ISP forward all incoming and outgoing email to them.
GB>They could send you a trojan horse that could set up shop on your PC
GB>and do or keep track of whatever, all with the cooperation of your
GB>ISP, not to mention spyware they could create and use.

GB>If you use PGP for your email, Adawre, Spybot, Spyware Blaster for
GB>spyware, SSH for FTPing, firewall, anti-virus and just not use
GB>instant messengers, you will probably be safe from their sniffing.

GB>But what average user will know to do even a small part of it?

The average ISP doesn't have the resources or money to implement a 
solution to monitor all traffic.  The technoids on the Internet can find 
ways around the monitoring as fast as the ISPs deploy it.  Simple port  
level redirection will work to stop port level monitoring of common well 
know ports.  Again, as you have pointed out, ISPs can deploy some pint 
solutions for some protocols but a full blown capturing solution that 
captures all session and payload data on all ports across an ISPs entire 
network is not feasible with today's technology.


Jeff


--- PCBoard (R) v15.3/M 10
 * Origin:  (1:226/600)