3 ms·

Problem is that there's no guarantee that twitter won't apply lossy transformations to your data (in fact, it's guaranteed that it does). So either you would ha

Problem is that there's no guarantee that twitter won't apply lossy transformations to your data (in fact, it's guaranteed that it does). So either you would have to encode the data with lots of redundancy and/or error correction, or you have to encode in like, QR code or something similar, and rely on image recognition to extract it. Inside the range of characters support by twitter, your data is "guaranteed" to not change

mananaysiempre 4y ago
In 2018 people discovered that Twitter would recompress images but leave the embedded ICC profile, if present, intact, and used that to make a Twitter-surviving JPEG+ZIP polyglot[1], although that got patched out once someone used it as a C&C channel[2]. Apparently that still worked (and was utilized for the same purpose) on Steam user profiles in 2021[3]. [1] https://twitter.com/David3141593/status/1057042085029822464 https://twitter.com/David3141593/status/1057042085029822464 [2] https://www.trendmicro.com/en_us/research/18/l/cybercriminals-use-malicious-memes-that-communicate-with-malware.html https://www.trendmicro.com/en_us/research/18/l/cybercriminal... [3] https://twitter.com/miltinh0c/status/1392944896760238080 https://twitter.com/miltinh0c/status/1392944896760238080
- Retr0id 4y ago
  This technique is still fully functional: https://github.com/DavidBuchanan314/tweetable-polyglot-png https://github.com/DavidBuchanan314/tweetable-polyglot-png