News for hackers. Stuff that matters.
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by echoangle on Friday October 20, 2023 @02:14PM (#37959579)
Isn’t it pretty easy to use inband signaling securely? For example you can have the „outer“ more privileged channel always add a prefix with the length of the following „inner“ message which can then be ignored/not parsed by the receiver. Or am I missing what you mean?
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by chc4 on Friday October 20, 2023 @02:23PM (#37959679)
That isn't in-band signaling, that's encapsulating one protocol in another.
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by nine_k on Friday October 20, 2023 @05:17PM (#37961659)
Then it is in-band signaling.

Out-of-band signaling is using a different channel entirely, like a different pair of wires, or otherwise a different interface.

Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by butlerm on Friday October 20, 2023 @07:01PM (#37962442)
Any system where there is a strict separation between data and control information is not considered a form of in-band signalling but rather out-of-band signalling based on an analogy of separation of a carrier into independent communication bands (using time or frequency division multiplexing for example). Many modern transport protocols can carry fully independent communications channels that way using frame division multiplexing.
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by astrobe_ on Saturday October 21, 2023 @03:09AM (#37964753)
But then, don't you have the problem of synchronizing the data channel and the control channel?
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by im3w1l on Saturday October 21, 2023 @02:09PM (#37969177)
Well as an example you could have a sequence of messages, and every message starts with some metadata like what type it is (data / control) and how long it is.
Re:"<ESC>[31M"? ANSI Terminal security in 2023 and finding 1... by butlerm on Tuesday October 24, 2023 @09:27AM (#37998899)
It is possible to sequence messages across multiple channels although of course you have to design the transport protocol to support that. Alternatively you can just have typed, ordered messages within the same channel, which is a much more likely design for something like this.