[NCAP-Discuss] why enhanced controlled interruption - not legal

Danny McPherson danny at tcb.net
Fri Feb 25 19:03:46 UTC 2022


On 2022-02-25 13:53, Jeff Schmidt wrote:
>> Matt has, and he understands these issues as well as anyone here, and
>> his response (that JS agreed with [I think] but doesn't like) explains
>> why.
> 
> Huh?
> 
> My response points out the inconvenient technical details of a
> honeypot implementation that make it undesirable for said purpose,
> coming from someone (me) that ran one for said purpose. I would not
> characterize that is "agreeing with but not liking."

Matt said one way exfiltration could be controlled / mitigated - I 
beleive you straw-manned how _you would do what Matt suggested and ["" 
what you say above] don't want wanna misquote you...


Controlled Interruption certainly checks the "convenience" box.


-danny



More information about the NCAP-Discuss mailing list