Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

This JPEG is also a webpage

lcamtuf.coredump.cx

Post reply on HN
Print view View original

31–40 of 236 posts

Re: This JPEG is also a webpage

#31

Post by gmfawcett »

brlewis wrote: post #23
tikhonj wrote: post #10

Earlier quoted context omitted.

I'm not an expert on squirrels, but that could be a ground squirrel[1] of some sort. Some varieties of ground squirrel look a lot like chipmunks. [1]: https://en.wikipedia.org/wiki/Ground_squirrel

A quick search for "striped ground squirrel" turned up only one variety, the thirteen-lined ground squirrel. The animal in the photo has stripes like a chipmunk.

Look for stripes on the face: without them, it's probably a squirrel. Both ground squirrels and chipmunks have body stripes, so the face is a better indicator.

http://naturemappingfoundation.org/natmap/facts/chipmunk_vs_...

http://www.differencebetween.info/difference-between-squirre...

Re: This JPEG is also a webpage

#33

Post by ninjakeyboard »

tomw1808 wrote: post #32

> Pretty radical, eh? Send money to: lcamtuf@coredump.cx How to send money to your email address? Not that I would send you some, but I wondered how you want to have that money received?

email money transfer should work fine aka Interac E-Transfer. see http://interac.ca/en/interac-e-transfer-consumer.html

Re: This JPEG is also a webpage

#35

Post by ygjb »

rimantas wrote: post #30
danbruc wrote: post #27

A testament to one of the worst decisions in computing history - not to fail displaying a web page with an error message in case it is not a valid HTML document.

Or one of the best. Switch wen browsers to strict processong and you will hardly find working web page.

Yeah, imagine if processors gave best effort to processing binaries... what could possibly go wrong :/

The decision to allow this was made early and the liberal accept/strict transmit paradigm has in general made the web a mess.

On the plus side, the consistent failure of browser vendors to apply strict controls to input means that as an application security person I will probably never be out of work :D Even though this pattern of behavior is starting to change, legacy support means that I will still be dealing with these issues well into my retirement!

Re: This JPEG is also a webpage

#36

Post by danbruc »

rimantas wrote: post #30
danbruc wrote: post #27

A testament to one of the worst decisions in computing history - not to fail displaying a web page with an error message in case it is not a valid HTML document.

Or one of the best. Switch wen browsers to strict processong and you will hardly find working web page.

Which are the faults of the authors. No one expects malformed source code to compile, a video with corrupted headers to play properly or a binary containing invalid instructions not to crash. This decision allowed people to get away with broken web pages instead of forcing them to fix their mistakes.

Re: This JPEG is also a webpage

#39

Post by nerevarthelame »

tomw1808 wrote: post #32

> Pretty radical, eh? Send money to: lcamtuf@coredump.cx How to send money to your email address? Not that I would send you some, but I wondered how you want to have that money received?

He\she isn't actually expecting payment, just as they don't really think that the trick is "pretty radical." It's just a mildly amusing way of providing contact information.

Re: This JPEG is also a webpage

#40

Post by jandrese »

aioprisan wrote: post #17
jandrese wrote: post #12

Earlier quoted context omitted.

Might be a way to bypass malicious script detectors that see the JPEG header and stop trying to process the file. It will be stopped dead by metadata filters though. Stripping out the comment would be step #1 for those devices.

What device would have metadata filters installed though? Not a modern browser, by default.

I was thinking more like an IDS.
Post reply on HN