There is always a way to defeat security

Most companies have a policy to reject non HTTP traffic (read TCP port 80 and 443).

An old friend of mine told me that a lot of companies do not verify if HTTP data is HTTP data…

So… with this in mind I changed the configuration of one of the SSH-daemons… the SSH-daemon will now also listen on port 443… and guess what… I have connection

Note: The case as described above was a bet with a good friend of mine, no illegal actions did happen!!!