[Freedombox-discuss] Without software collusion

Rick Hodgin foxmuldrster at yahoo.com
Thu Jun 28 20:39:09 UTC 2012


That's been my point all along.  Out of band in this context means the OS and hypervisor and any security running on the computer itself is on the other side of these communications.  It's happening outside of the frame of reference of their observation.

Best regards,
Rick C. Hodgin

--- On Thu, 6/28/12, Ben Mendis <dragonwisard at gmail.com> wrote:

> From: Ben Mendis <dragonwisard at gmail.com>
> Subject: Re: [Freedombox-discuss] Without software collusion
> To: "Tim Schmidt" <timschmidt at gmail.com>
> Cc: "Rick Hodgin" <foxmuldrster at yahoo.com>, freedombox-discuss at lists.alioth.debian.org, freebirds at hushmail.com
> Date: Thursday, June 28, 2012, 4:23 PM
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> What Tim is saying is that while the vPro control packets
> seem
> "out-of-band" to the receiving computer (becaues they bypass
> the OS/CPU
> of the receiver) they are not "out-of-band" to the
> intermediate
> computers and devices on the network. Any router or other
> computer on
> the network would see them and process them like any other
> network
> traffic. The raw Ethernet frame can be sniffed and analyzed
> with
> Wireshark or similar tools. The frame itself still has to
> follow all the
> rules of how packets are processed at layers 1 through 3 of
> the OSI
> model when they traverse switches and routers on the
> network.
> 
> On Thu, 28 Jun 2012, Tim Schmidt wrote:
> 
> > On Thu, Jun 28, 2012 at 4:13 PM, Rick Hodgin <foxmuldrster at yahoo.com>
> wrote:
> >> However, it is out-of-band because the sender and
> receiver are operating on their own.
> >
> > No, they're not.  There are ethernet switches,
> wireless access points,
> > or other networking equipment involved - each fully
> capable computers
> > in their own right.
> >
> > 'Out of band' is entirely inappropriate language for
> what's happening here.
> >
> > They're just two ethernet devices, speaking ethernet
> frames to each
> > other.  Like normal.
> >
> > The fact that the CPU of one of the machines isn't
> aware of the
> > network communications means nothing.  It's still
> going on, still
> > observable by any other ethernet device on the local
> network.
> >
> > --tim
> >
> > _______________________________________________
> > Freedombox-discuss mailing list
> > Freedombox-discuss at lists.alioth.debian.org
> > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> 
> iQEcBAEBAgAGBQJP7L1dAAoJEMco5sYyM+0wE8EIAMDtyWB/xZ5bCiEnkT0V7PEJ
> LvUhbOa665TjX9zhHpqtU5C5Pa8zJRN2xAo0h/LJjVSf9XSd1aRVy2vUDAsCQr8S
> 18RrAFkwQ8R8pf8a3DM2GffZ+1U91NuF6tTSQOaSIfKwCCJ0yLV5wSpojyxnT1Lx
> z1h6pqkARjMXIDkhmwE1y0pwV1OWVoAMA7OUJwuJlc2w02Slf3nvLcnrxFm8QUsP
> H+35Usa2ey7uS6o5rJhSpn6iwPpbHh9A2tkQf336sYC20eM6m9HVsvzcB2C843lP
> 9NglxUSydhUD4gyHY7Xt0Hwm0ZGEBAl2OUUYyzO78cZNcM47GNqaJaLxMoG80tg=
> =alWl
> -----END PGP SIGNATURE-----
> 



More information about the Freedombox-discuss mailing list