4 ms·

Imagine I use a timing attack to visually encode some information about you in an image and trick you into sending a screenshot somewhere. Very quick take, but

by slver 5y ago

Imagine I use a timing attack to visually encode some information about you in an image and trick you into sending a screenshot somewhere. Very quick take, but systems are very interconnected these days, so sandboxes tend to leak in very unintentional ways.

jonsneyers 5y ago
Yes, that is true, but it isn't particularly related to JPEG XL specifically.
KMag 5y ago
How do you read a timer from within the JPEG XL bitstream? I believe the decoding process is deterministic.
- slver 5y ago
  It's a challenge, but I'd probably look into any decoders that parallelize the decoding and see if I can abuse this.
  - tsegratis 5y ago
    Just wait, its only a short while til JPEG contains the pdf spec and a javascript interpreter
  - wizzwizz4 5y ago
    You'd need to exploit an implementation bug, or have the user be streaming or something (so some squares appear before others as the output of your timing attack).