Live data from Hacker News

Itty Bitty: Sites contained within their own links

itty.bitty.site

61–70 of 111 posts

Re: Itty Bitty: Sites contained within their own links

#66
I discovered data URIs in 2014, when trying to make an app that doesn't need to be distributed through an app store. They're fun.

Nihilogic made a 14KB Mario clone that can be fit into a data URI.

https://web.archive.org/web/20090310220414/http://blog.nihil...

I also know about the way Cemetech's jsTified TI-83 emulator parses pictures to load a calculator ROM file (steganography).

https://www.cemetech.net/projects/jstified/

I put those two together, and imagined a new form of app distribution, which I call "Fondant".

1. Click a data URI bookmarklet. That is a bootloader, with the parser code for a picture. It presents a button to upload a picture.

2. Select a picture from the camera roll, which is the app.

3. To save, generate a picture and save that to the camera roll.

This could be used to transfer other file types (e.g. a music player with a mixtape) over universally-supported photo sharing platforms.

Unfortunately, the iPhone recompresses JPGs when clicking Save to Camera Roll, and the lost quality means the photo isn't parseable the next time. I did some experiments, and turned a blue/green checkerboard pattern into grey after 50 repeated Saves.

I still think there's potential in the idea; if someone wants to work together on it then please get in touch. I'll also write up my experiments if you comment and ask for it.

Re: Itty Bitty: Sites contained within their own links

#69
post #15
post #5

Don't use this for anything where you don't want cross-site-scripting vulnerabilities...

What would such a cross-site scripting vuln do? There isn't anything to steal. Moreover you wouldn't use this for anything where you aren't in control of where people get the links from, because as soon as someone else starts sharing it they can of course edit it too.

The trustworthiness of the domain name would effectively be stolen.

Re: Itty Bitty: Sites contained within their own links

#70

Earlier quoted context omitted.

It's like an image containing its own SHA2 hash. How is it possible?

You can create videos on YouTube too that contain it's own URL.

For anyone wondering how is this possible I've made a quick research and the method is in the description part of this youtube video: https://www.youtube.com/watch?v=ufq2Eb78kSU

In short, Youtube API's resume upload function can be abused to achieve this.

Post reply on HN