3 ms·
That is exactly what I was referring to. An HTML file has no empty space to hide something in. For those not familiar with the terminology, "rubber hose" in a
by zyx321 9y ago
That is exactly what I was referring to. An HTML file has no empty space to hide something in.
For those not familiar with the terminology, "rubber hose" in a cryptography context is a euphemism for torture. I know of two approaches to counter it.
Plausible deniability, where you can give out a password that unlocks some of the data, but your adversary has no way of knowing whether that's all of it. Useful if you can expect that you'll be let go if you're 'innocent'.
A self-destruct function, e.g. you give out the wrong code 3 times and your device wipes the data. Useful for military use cases where the data is worth more than the life of the person holding it.
- examancer 9y agoIf the tool always makes a large blob of noise to hide the HTML in, and accepts an arbitrary number of key/html pairs it seems like this could work in the browser. Would seem to just cost disk space to be viable.
- ColanR 9y agoThe 'empty space' is the encrypted blob. The unknown variable that the rubber hose encryption system exploits is that the interrogator doesn't know what's inside that blob, and there might be several 'partitions' inside. Edit: I think we're on the same page. That's why I said it doesn't seem to be relevant here. I don't see how it could be pulled off conveniently within html.