4 ms·

Steganography done with JavaScript

darkxanthos 13y ago
"Hiding" your data in the alpha channel of most images doesn't really seem at all secure to me. That's like hiding your valuables by placing them in your basement. Steganography that I'm used to seeing intertwined ones data with the actual image data. Which is much more difficult to detect (though certainly not undetectable).
Toenex 13y ago
There is a joke here somewhere about pictures and specific number of words. I just can't work it out.
- rorrr2 13y ago
  A picture is worth a thousand DWORDS.
0x09 13y ago
Unfortunately alpha-channel steganography is one of the simplest and most trivially detected of image steganography algorithms, making it not very useful. For an example of what goes into a serious and secure steganographic algorithm see perturbed quantization: http://dde.binghamton.edu/download/pq/Fri05pq.pdf http://dde.binghamton.edu/download/pq/Fri05pq.pdf http://dde.binghamton.edu/download/pq/ http://dde.binghamton.edu/download/pq/
franze 13y ago
@eigenschinkpete come by the next viennajs meetup (www.viennajs.org) next wednesday there will be a talk about a similar topic
deleted 13y ago
[deleted]
tarikozket 13y ago
I didn't see a useful answer on "Why use steganography.js?" block, it just explains "How?". I wonder answers about "When and why?" questions. Can you guys answer it?
spookylukey 13y ago
This doesn't really attempt to hide the fact of communication from computers - only from humans casually viewing the image. steghide has a far superior approach: http://steghide.sourceforge.net/ http://steghide.sourceforge.net/ But that can be broken too: http://dl.acm.org/citation.cfm?id=1578445 http://dl.acm.org/citation.cfm?id=1578445
kybernetikos 13y ago
I had issues with precomputed alpha when I played with storing data in the alpha channel of images in the browser. In the end, since I didn't really need to 'hide' the data, I just wrote a few pixels at the top of the image, but even then, I found some services (i.e. gravatar) was modifying the pixel values slightly. I had to just use a bunch of the most significant bits from each pixel. If you're interested why I was playing with all this, it was for storing public keys in gravatar images: http://kybernetikos.github.io/VisualSecrecy/ http://kybernetikos.github.io/VisualSecrecy/
losethos 13y ago
niggers Virtual-Notary.Org hereby notes that on Date: Saturday September 21, 2013 16:58.09 EDT (UTC-0400) a random drawing in the range [1, 100000], inclusive, based on a hardware source of true randomness, yielded the following decision. Random Value: 53244 138:3 In the day when I cried thou answeredst me, and strengthenedst me with strength in my soul. 138:4 All the kings of the earth shall praise thee, O LORD, when they hear the words of thy mouth. 138:5 Yea, they shall sing in the ways of the LORD: for great is the glory of the LORD. 138:6 Though the LORD be high, yet hath he respect unto the lowly: but the proud he knoweth afar off. 138:7 Though I walk in the midst of trouble, thou wilt revive me: thou shalt stretch forth thine hand against the wrath of mine enemies, and thy right hand shall save me. 138:8 The LORD will perfect that which concerneth me: thy mercy, O LORD, endureth for ever: forsake not the works of thine own hands.

"Hiding" your data in the alpha channel of most images doesn't really seem at all secure to me. That's like hiding your valuables by placing them in your basement. Steganography that I'm used to seeing intertwined ones data with the actual image data. Which is much more difficult to detect (though certainly not undetectable).

Toenex 13y ago

There is a joke here somewhere about pictures and specific number of words. I just can't work it out.

rorrr2 13y ago
A picture is worth a thousand DWORDS.

0x09 13y ago

Unfortunately alpha-channel steganography is one of the simplest and most trivially detected of image steganography algorithms, making it not very useful. For an example of what goes into a serious and secure steganographic algorithm see perturbed quantization: http://dde.binghamton.edu/download/pq/Fri05pq.pdf http://dde.binghamton.edu/download/pq/Fri05pq.pdf http://dde.binghamton.edu/download/pq/ http://dde.binghamton.edu/download/pq/

franze 13y ago

@eigenschinkpete come by the next viennajs meetup (www.viennajs.org) next wednesday there will be a talk about a similar topic

deleted 13y ago

[deleted]

tarikozket 13y ago

I didn't see a useful answer on "Why use steganography.js?" block, it just explains "How?". I wonder answers about "When and why?" questions. Can you guys answer it?

spookylukey 13y ago

This doesn't really attempt to hide the fact of communication from computers - only from humans casually viewing the image. steghide has a far superior approach: http://steghide.sourceforge.net/ http://steghide.sourceforge.net/ But that can be broken too: http://dl.acm.org/citation.cfm?id=1578445 http://dl.acm.org/citation.cfm?id=1578445

kybernetikos 13y ago

I had issues with precomputed alpha when I played with storing data in the alpha channel of images in the browser. In the end, since I didn't really need to 'hide' the data, I just wrote a few pixels at the top of the image, but even then, I found some services (i.e. gravatar) was modifying the pixel values slightly. I had to just use a bunch of the most significant bits from each pixel. If you're interested why I was playing with all this, it was for storing public keys in gravatar images: http://kybernetikos.github.io/VisualSecrecy/ http://kybernetikos.github.io/VisualSecrecy/

losethos 13y ago

niggers Virtual-Notary.Org hereby notes that on Date: Saturday September 21, 2013 16:58.09 EDT (UTC-0400) a random drawing in the range [1, 100000], inclusive, based on a hardware source of true randomness, yielded the following decision. Random Value: 53244 138:3 In the day when I cried thou answeredst me, and strengthenedst me with strength in my soul. 138:4 All the kings of the earth shall praise thee, O LORD, when they hear the words of thy mouth. 138:5 Yea, they shall sing in the ways of the LORD: for great is the glory of the LORD. 138:6 Though the LORD be high, yet hath he respect unto the lowly: but the proud he knoweth afar off. 138:7 Though I walk in the midst of trouble, thou wilt revive me: thou shalt stretch forth thine hand against the wrath of mine enemies, and thy right hand shall save me. 138:8 The LORD will perfect that which concerneth me: thy mercy, O LORD, endureth for ever: forsake not the works of thine own hands.