In today's Times - now more stego mythology

[Dave Bird]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In article <E15qCkT-0005f0-00@wisbech.cl.cam.ac.uk>, Ross Anderson
<Ross.Anderson@cl.cam.ac.uk> writes
>A journalist called me from the Times and told me he'd had a
>briefing from the security service on steganography. He had a
>lot of strange ideas, and I spent maybe 30 minutes trying to
>explain the sort of things that are common knowledge to
>members of this list. In particular, all we appear to know so
>far is that the bad guys used plaintext emails, and this is
>precisely what one expects a competent opponent to do: you do
>not want to draw attention to yourself by being among the few
>users of an exotic confidentiality or anonymity service, and
>in any case normal emails are hidden in just the same way as a
>pebble on brighton beach (Caspar's analogy).
>
>However, it transpired that he was determined (or had been
>instructed) to write the story anyway.
>The comments ascribed to me in the article in question are
>simply wrong. I did not at any time suggest that the bad guys
>would generate cover traffic themselves, merely hide their own
>emails in the huge volumes of email that exist anyway.
>
>Apart from that, the articles should be seen as a deliberate
>plant by MI5. The fact that the Times ran them, even after it
>had been explained to them in detail why their version of
>events was implausible, seriously undermines the credibility
>of that paper's news coverage.

 Then you should write to them pointing this out, CC'ed to 
 the Guardian and Independent if the Times don't want to print it.

- -- 
   ^-^-^-@@-^-;-^   http://www.xemu.demon.co.uk/
        (..)__u     news:alt.smoking.mooses

       happy as a clam at high tide -. <_" .-._.-.


-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBO8Bg2X8v/Y5zkfRPEQKHlwCfek/fqjSQcGSaQ0GyTJ6QaLtVVCkAn1Y1
AOkDRSqcxLmXVqBUQrDlODDK
=pMZ3
-----END PGP SIGNATURE-----