<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1458" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>Based
on the description below, this seems to be a method that
might</FONT></SPAN></DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>remove
copyright protections as well since a change is/has occurred
and</FONT></SPAN></DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>any
digital signature could not be the same. </FONT></SPAN></DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>SO
possibly a protection on one hand might also be a requirement
breaker</FONT></SPAN></DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>on the
other hand.</FONT></SPAN></DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=779580419-06112004><FONT face=Arial color=#0000ff size=2>Jack
Holleran</FONT></SPAN></DIV>
<DIV> </DIV>
<P><FONT size=2></FONT> </P>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> govsec-bounces@attrition.org
[mailto:govsec-bounces@attrition.org]<B>On Behalf Of </B>Peter
Churchyard<BR><B>Sent:</B> Saturday, November 06, 2004 10:03 AM<BR><B>To:</B>
govsec@attrition.org<BR><B>Subject:</B> Re: [govsec] Morris Worm and a Change
in Direction<BR><BR></FONT></DIV>
<DIV>
<BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">
<P>Translating content into what should be equivalent content in another
form is used. Some of the problems recently seen with image formats containg
exploits just shows that there are few safe data formats. jpeg <-> gif
<-> jpeg as an example could be done at the gateway to clean up images
and remove steganography. Likewise mp3 <-> wma <-> mp3 could be
used do the same. </P>
<P>what are the requirements since they will define acceptable security.
</P>
<P> </P>
<P>Lori</P></BLOCKQUOTE></DIV></BLOCKQUOTE></BODY></HTML>