3 ms·
They controlled the visual appearance of the different PDF files in the example. Why couldn't you inject malware instead?
by Natanael_L 10y ago
They controlled the visual appearance of the different PDF files in the example. Why couldn't you inject malware instead?
- sktrdie 10y agoBecause controlling the visual appearance would change the data of the PDF, hence change the underlying hash.
- saalweachter 10y agoNon-coding regions. Not every part of a file codes for its apparent output. Comments, symbol names, whitespace, color tables... for most file formats, there are countless variations of the bytes on disk which produce outputs which are visually indistinguishable. The trick is to identify this space in a way that lets you efficiently iterate through it until you find a version which matches the target hash.
- sktrdie 10y agoAre you sure this isn't only possible because of the PDF file format? http://shattered.it/static/pdf_format.png http://shattered.it/static/pdf_format.png Hence shouldn't be possible for general malware.
- Natanael_L 10y agoGeneral malware can be injected in almost anything. Few formats are strict enough to stop that.