LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   probably one of the most basic security questions... (https://www.linuxquestions.org/questions/linux-security-4/probably-one-of-the-most-basic-security-questions-235622/)

breezewax 09-27-2004 12:40 AM

probably one of the most basic security questions...
 
...why, exactly, isn't there a Website out there that's source cannot be found and thereby shut down by authorities? Curious.

Ambrosia 09-27-2004 04:28 AM

Sorry..but I don't quite understand the question.

What do you mean by source? Shut down for what reason?

chort 09-27-2004 10:57 AM

The answer is: No. If anyone can reach your website, then they (someone with a wiretap order) can follow it the entire way back to wherever the box is physically located.

breezewax 09-27-2004 02:27 PM

i see...the implications of such a Website struck me the other night...would change everything. just a thought ;)...thanks

chort 09-27-2004 05:37 PM

Yes, the implications would be a complete anarchy and breakdown of lawful society because any content that could be made digital could be distributed indefinitely, regardless of legal status. Your question borders very closely on soliciting help will illegal activities.

unSpawn 09-28-2004 04:46 PM

Your question borders very closely on soliciting help will illegal activities.
Not trying to break the united front, but as fellow moderator I respectfully disagree on the count the question is set rather broad (if he where eliciting help with specific details I would consider politely shutting it down).
Personally I kinda enjoyed his question cuz it got me thinking if it would be (at least theoretically) possible to accomplish this w/o being able (or at least make it very hard) to pinpoint a physical location.

chort 09-29-2004 02:38 AM

You could obfuscate a lot, but using BGP looking glasses you could narrow it down to the last AS. Of course you wouldn't have to use all routed packets, you could use reverse proxying and/or web services to further obscure the backend, but at least you would be able to find the front-end server which would inevitably lead to the content server.

One way you could hide something would be to use stegonography to hide traffic inside other protocols or data, but that would require that the clients also have specialized software that understands your stego. At that point it wouldn't really be a web server in the common understanding, but more of a peer-to-peer application.

Using IPSec in tunnel mode would probably be the closest you could get to really hiding the source of a web server, but the encrypted traffic could still be followed to the last gateway where it's unencrypted.

breezewax 10-02-2004 12:42 AM

yeah it's incredible that such a drastic event could even possibly occur, and most of the public have never really thought about it. i've also heard of the idea of simply hiding the hosting machine inside common electronics or even running it from a network printer...i'm just glad i'm not one of the people who has to deal with that possibility ;)

davholla 10-04-2004 11:24 AM

Quote:

Originally posted by chort
The answer is: No. If anyone can reach your website, then they (someone with a wiretap order) can follow it the entire way back to wherever the box is physically located.
Then surely it should be possible to find where websites showing beheadings of western citizens in Iraq/US (sorry I meant to right Saudi) are being hosted ?
If that is so I hope it happens soon and action is taken.

sh1ft 10-04-2004 11:31 AM

Quote:

Originally posted by davholla
Then surely it should be possible to find where websites showing beheadings of western citizens in Iraq/US are being hosted ?
If that is so I hope it happens soon and action is taken.

Of course, what happens if these websites are hosted outside of a so-called '1st world' country? Is it then the legal responsibiltiy of (i'm assuming here your from u.s.) the united states to shut down these sites? What right do they have to do this.

There's no question that the content is offensive, but I don't see how you believe a seperate state like U.S. has a right to shut it down if it outside their jurisdiction.

On another note, does it really matter if the source can be found if the website is somewhere like say, an oil rig in international waters, does it? Just curious ;)

davholla 10-04-2004 03:25 PM

Actually I'm from the UK (look at my location).

Surely in all states of the world apart from possibly North Korea, the owners of these websites could be questioned as they know about criminal acts.

I know the US is not universally loved (I am not happy on some Americans support for the IRA but lets not get off topic).
However as far as I know no Goverment with the possible exception of North Korea supports the beheadings of hostages in Iraq/Saudi, who come from many countries (hopefully no more will be killed).

unSpawn 10-10-2004 12:30 PM

As moderator I do not like the way this thread is heading.
The Linux - Security forum deals with security.
Security != politics, so this thread will be closed.
Anyone wants this thread reopened can ask me by email.


All times are GMT -5. The time now is 12:49 AM.