[prev in list] [next in list] [prev in thread] [next in thread] 

List:       owasp-dotnet
Subject:    RE: [Owasp-dotnet] Has anybody used the 'GreenBelt' Sandbox application
From:       "Mark Curphey" <mark () curphey ! com>
Date:       2005-08-08 16:05:25
Message-ID: 200508081605.MAA04472 () elephant ! cnchost ! com
[Download RAW message or body]

Sure but writing a covert channel to embed a message in a jpeg is trivial
and very very hard to find. So unless they have made a revolutionary
breakthrough in cryptography which was not published in a mathematical
journal (see Snake Oil FAQ) I would be very skeptical. 

-----Original Message-----
From: owasp-dotnet-admin@lists.sourceforge.net
[mailto:owasp-dotnet-admin@lists.sourceforge.net] On Behalf Of Yvan Boily
Sent: Monday, August 08, 2005 11:41 AM
To: Mark Curphey
Cc: Dinis Cruz; owasp-dotnet@lists.sourceforge.net
Subject: Re: [Owasp-dotnet] Has anybody used the 'GreenBelt' Sandbox
application

Well, from what I read of their site, they claim that viruses and such that
attempt to use stego to get past other security technologies have not been
able to circumvent the GreenBorder software.

They do not appear claim to support or promote steganography (granted, I
didn't read the entire site, but a google search of the site turns up only a
few references to it.

I would say the biggest issue is the lack of exposure for the product and
how flat-out new it is.  It appears to be the only offering from the
company, and there is very little information (aside from press-releases
:P).

It would be interesting to test, after all, it is a client-based solution,
and we all know how trustworthy software in control of the end-user is :)


On 8/7/05, Mark Curphey <mark@curphey.com> wrote:
> They tout steganography - therefore I would have to say bollox ;-) 
> With snake oil marketing its hard to take things seriously IMHO.
> 
> http://www.interhack.net/people/cmcurtin/snake-oil-faq.html
> 
> 
> -----Original Message-----
> From: owasp-dotnet-admin@lists.sourceforge.net
> [mailto:owasp-dotnet-admin@lists.sourceforge.net] On Behalf Of Dinis 
> Cruz
> Sent: Sunday, August 07, 2005 1:28 PM
> To: owasp-dotnet@lists.sourceforge.net
> Subject: [Owasp-dotnet] Has anybody used the 'GreenBelt' Sandbox 
> application
> 
> they make some serious claims about the security benefits of their 
> product
> 
> http://www.greenborder.com/solutions/technology.html#
> 
> I wonder how robust this stuff is?
> 
> Dinis Cruz
> .Net Security Consultant
> Owasp .Net Project Leader
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO 
> September 19-22, 2005 * San Francisco, CA * Development Lifecycle 
> Practices Agile & Plan-Driven Development * Managing Projects & Teams 
> * Testing & QA Security
> * Process Improvement & Measurement * http://www.sqe.com/bsce5sf 
> _______________________________________________
> Owasp-dotnet mailing list
> Owasp-dotnet@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/owasp-dotnet
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO 
> September 19-22, 2005 * San Francisco, CA * Development Lifecycle 
> Practices Agile & Plan-Driven Development * Managing Projects & Teams 
> * Testing & QA Security * Process Improvement & Measurement * 
> http://www.sqe.com/bsce5sf 
> _______________________________________________
> Owasp-dotnet mailing list
> Owasp-dotnet@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/owasp-dotnet
>


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO September
19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile &
Plan-Driven Development * Managing Projects & Teams * Testing & QA Security
* Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Owasp-dotnet mailing list
Owasp-dotnet@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/owasp-dotnet



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Owasp-dotnet mailing list
Owasp-dotnet@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/owasp-dotnet
[prev in list] [next in list] [prev in thread] [next in thread]