On Wed, May 25, 2022 at 08:12:49AM -0700, Richard Cochran wrote: > Abby, > > On Mon, May 23, 2022 at 01:27:29PM -0500, Abby Marsh wrote: > > I'm a researcher working on a project that's confirmed a viable covert > > channel in the current version of linuxptp. I'd like to report this; is it > > best to do so here, or on another list? > > What is a "viable covert channel", and why does it matter?
If I understand it correctly, it's about exchanging hidden information for controlling botnets etc. In PTP it could be in the timestamps, sequence numbers and other fields in the header, or TLVs. It cannot be prevented. As PTP is not normally used over Internet, I'd expect any PTP message routed to Internet to trigger an alarm. -- Miroslav Lichvar _______________________________________________ Linuxptp-users mailing list Linuxptp-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linuxptp-users
