Collaborate Disseminate
I don’t even know if this counts as steganography, but I have some passwords that are randomly generated characters. I have saved them by simply opening a picture file using a text viewer and pasting them to the end of the data.
Is this sa… Continue reading Is hiding passwords in an image file a safe place to store them?
It is a classic rite of passage for nerdy kids to write secret messages using lemon juice. If you somehow missed that, you can’t see the writing until you heat …read more Continue reading Kitchen Steganography with Turmeric
The Washington Post is reporting on a hack to fool automatic resume sorting programs: putting text in a white font. The idea is that the programs rely primarily on simple pattern matching, and the trick is to copy a list of relevant keywords—or the published job description—into the resume in a white font. The computer will process the text, but humans won’t see it.
Clever. I’m not sure it’s actually useful in getting a job, though. Eventually the humans will figure out that the applicant doesn’t actually have the required skills. But…maybe…
Continue reading Hacking AI Resume Screening with Text in a White Font
Use this comprehensive list of strategies to help you safeguard your company’s data from threats and data breaches. Continue reading How to Protect and Secure Your Data in 10 Ways
I’m under the impression that stegonographic manipulation of file names or packet timing would qualify as a storage covert channel and a timing covert channel respectively.
I came across this seemingly contradictory quote (without citation… Continue reading Covert channel definition conflicts regarding steganography
New research suggests that AIs can produce perfectly secure steganographic images:
Abstract: Steganography is the practice of encoding secret information into innocuous content in such a manner that an adversarial third party would not realize that there is hidden meaning. While this problem has classically been studied in security literature, recent advances in generative models have led to a shared interest among security and machine learning researchers in developing scalable steganography techniques. In this work, we show that a steganography procedure is perfectly secure under Cachin (1998)’s information theoretic-model of steganography if and only if it is induced by a coupling. Furthermore, we show that, among perfectly secure procedures, a procedure is maximally efficient if and only if it is induced by a minimum entropy coupling. These insights yield what are, to the best of our knowledge, the first steganography algorithms to achieve perfect security guarantees with non-trivial efficiency; additionally, these algorithms are highly scalable. To provide empirical validation, we compare a minimum entropy coupling-based approach to three modern baselines—arithmetic coding, Meteor, and adaptive dynamic grouping—using GPT-2, WaveRNN, and Image Transformer as communication channels. We find that the minimum entropy coupling-based approach achieves superior encoding efficiency, despite its stronger security constraints. In aggregate, these results suggest that it may be natural to view information-theoretic steganography through the lens of minimum entropy coupling…
To begin, please someone correct me if I am wrong, but I believe OutGuess was definitively broken in the paper "Attacking the OutGuess" in 2002 and this attack was never patched. It seems that since then, messages embedded with O… Continue reading Detecting messages embedded in a jpg image with OutGuess
From an article about Zheng Xiaoqing, an American convicted of spying for China:
According to a Department of Justice (DOJ) indictment, the US citizen hid confidential files stolen from his employers in the binary code of a digital photograph of a suns… Continue reading Real-World Steganography
I’m doing a CTF and it’s about steganography. I found some data inside the image (it’s raw) but I can’t figure out how to visualise it in a way that gives me the flag. There is no header and there is no match with ASCII characters in xxd. … Continue reading Can’t figure out what is this data
By Waqas
Threat actors are using steganography to hide malicious code in images.
This is a post from HackRead.com Read the original post: GitHub Abused to Distribute Malicious Packages on PyPI in Image Files
Continue reading GitHub Abused to Distribute Malicious Packages on PyPI in Image Files