Silence on the Wire

Chapter 13. Smoke and Mirrors

Or how to disappear with grace

—

Many of the information disclosure scenarios discussed so far require careful analysis of the information sent by a remote system in order to deduce certain facts about the sender or to intercept additional data they are not aware of sending in the first place. In several cases, however, only circumstantial evidence of the presence of some form of activity can be gathered. As discussed in Chapter 1 and Chapter 2, by precisely interpreting this evidence, you can determine the probable whereabouts of the user or an application that processes sensitive data, thus indirectly uncovering secrets of the victim’s machine without having to access the data itself.

Some features of the IP make many ...