DISQUS

Matasano Chargen: Attacking “Photoshop Encryption”

  • Roland Dobbins · 2 years ago
    It seems to me that the safest way to blank things out is to simply excise them from the image with a crop tool, then insert a black rectangle over the cropped area to show the elision.
  • Thomas Ptacek · 2 years ago
    That's what Dheera says too, but people screw this up all the time (as you imply), by layering a black rectangle over the data instead of making sure to remove it first.
  • one.miguel · 2 years ago
    "people screw this up all the time (as you imply), by layering a black rectangle over the data instead of making sure to remove it first."

    I believe layering a black rectangle over the data should secure it as well (unless you leave a part of the data showing) as removing it. Perhaps you mis-wrote?
  • LMH · 2 years ago
    Actually it doesn't matter if he mis-typed. It's a image format issue (ex. does the format support layers?).

    Normally the software itself warns about that (ex. see Gimp), when saving from one format that supports them, to another that doesn't.
  • one.miguel · 2 years ago
    True, if you are crazy enough post a multi-layered image file on the Internet (vs an exported GIF, JPEG or PNG)! But the article posted about discusses using mosiac or blurring or some other technique to obscure sensitive data and the ability to brute force it, not simply hiding layers.

    BTW, LMH, I like the recent applefun findings, especially the iPhoto one.
  • LMH · 2 years ago
    What I wanted to say is that when you *save* the file, and you have positioned a new layer over the sensitive area, if the image format actually supports that, it will be silently saved (after all, the application warns because format incompatibility, not because you are hiding alien autopsy evidence ;o).

    I've seen people doing similar stuff in Flash videos as well (positioning "black gaps" over information).

    Not even talking about the PDF fiasco...
  • grey · 2 years ago
    OK, so I just have to insert a bit of lecherous knowledge here.

    Like all futuristic technology, the Japanese are millenia ahead of the rest of the world, as they've been doing this stuff for ages.

    e.g.

    http://homepage3.nifty.com/furumizo/gmaskd_e.htm

    http://hp.vector.co.jp/authors/VA013065/index2.htm

    and so on.

    "Pr0n with mosiacs? FUCK WE NEED TO REVERSE THAT SHIT!" - translation of some epitath of horny person in .jp years ago.

    P'shaw, Japanese can innovate my ass!

    Seriously though, pr0n is a far more interesting motivator than checks? And yeesh, without people fucking up the black bars we'd never get gems like http://old.fuckallyall.com/article1585.html of techtv screensaver host pr0n.

    To get super geeky, there was even a joke allusion in otaku no video in the late 1980's that one of the geeks in the faux-interview sequences had developed a pair of goggles to demosiac in realtime for video watching.

    And don't even get me started on talking about people who reverse Japanese video games to remove any mosaic code (the images tend to use proprietary formats in pristine uncensored quality to simultaneously thwart and tempt reversers).

    I guess the question in my mind is... does Dheera's stuff employ new techniques that can be employed to better pr0n decensoring efforts, or is this more of the same old?

    I'm sorry, I couldn't even pretend to be serious with this post, but it really had to be said. ;)
  • grey · 2 years ago
    Sorry, there's more of interest in the Japanese unmasking tech

    Such as shooting the messanger (i.e. going after the guy who wrote FLMask as somehow being an enabler of better pr0n sites)
    http://joi.ito.com/archives/1999/11/01/japans_c...

    I've got to say the simple tutorial on unmasking images is probably my favourite:
    http://hp.vector.co.jp/authors/VA013065/Lunmask...

    Like I said. Japan, way way ahead of us in technology, again.