Live data from Hacker News

A tool for recovering passwords from pixelized screenshots

github.com

61–70 of 130 posts

Re: A tool for recovering passwords from pixelized screenshots

#62

Why is pixelation preferable to a big black obliterating box? To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure.

This reminds of the Markup tool[1] on iPhone. People use it to redact from screenshots, but it was (is?) actually slightly transparent by default. [1] https://9to5mac.com/2018/03/13/ios-markup-reveal-redact-sens...

Wait, shit I have totally done this. God damn it. Fortunately nothing super sensitive but damn.

Re: A tool for recovering passwords from pixelized screenshots

#63
post #55

Earlier quoted context omitted.

Can't facepalm enough. Just, amazing incompetence.

People say the same thing about scans of printouts. But I guess there is a reason for those.

Those at least destroy any non-visible data.

Re: A tool for recovering passwords from pixelized screenshots

#64

Why is pixelation preferable to a big black obliterating box? To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure.

This reminds of the Markup tool[1] on iPhone. People use it to redact from screenshots, but it was (is?) actually slightly transparent by default. [1] https://9to5mac.com/2018/03/13/ios-markup-reveal-redact-sens...

Non-AMP link: https://9to5mac.com/2018/03/13/ios-markup-reveal-redact-sens...

Re: A tool for recovering passwords from pixelized screenshots

#65
post #3

Earlier quoted context omitted.

It's not. There's never going to be a tool that does this with black bars. The only benefit I can think of is legitimacy. Having something blurred there suggests that there was actually something there.

Yeah I think blurring is more aesthetic, and until recently was seemingly just as secure. It reminds me of how people have used the Photoshop swirl tool to obscure faces, but you could just use the swirl tool in the other direction to undo the effect.

"Mr. Swirl"! https://en.wikipedia.org/wiki/Christopher_Paul_Neil#Interpol...

Re: A tool for recovering passwords from pixelized screenshots

#66
post #40
post #7

Earlier quoted context omitted.

> Why is pixelation preferable to a big black obliterating box? From a security perspective it has zero advantages, but I guess some people like the aesthetics? > To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure. There doesn't need to be an arms race, one ca…

Yep, just replace the original password for "password" and pixelate that, if it really must look like a real password. And make sure to never use "password" as a real password, but that's a different level of shooting oneself in the foot.

Maybe replace it with a black strip and pixelate that

Re: A tool for recovering passwords from pixelized screenshots

#67

Why is pixelation preferable to a big black obliterating box? To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure.

Why always black boxes? The box could be of any color. In this case, white works best.

Re: A tool for recovering passwords from pixelized screenshots

#68
post #39
post #36

Earlier quoted context omitted.

Because pixelation doesn't attract attention as much as black box and is therefore a better placeholder. A black box with sharp edges has much more contrast than all the legit elements in the image and becomes visually dominant whereas typically you want to attract attention to something else on the page. For a similar reason, designers use "lorem ipsum" placeholder text rather than all-white or all-black placeholder…

The clear answer is to use pixelated lorem ipsum for obfuscation. :)

Boom, startup idea right there. Provide secure-pixelize as a service, and monetize by selling on the side whatever info was sensitive enough for people to want to hide

Re: A tool for recovering passwords from pixelized screenshots

#69
post #7

Why is pixelation preferable to a big black obliterating box? To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure.

> Why is pixelation preferable to a big black obliterating box? From a security perspective it has zero advantages, but I guess some people like the aesthetics? > To me, it seems like a lot of wasted time and effort and potential arms race between encoders and decoders and the risk of being exposed when you could just put a big black box over whatever you wish to obscure. There doesn't need to be an arms race, one ca…

> take a selection, apply average solid color and random text over it, then pixelate the result

Averaging the color leaks information. To avoid leaking info, destroy the pixels as the first step. Get colors from outside the selection.

Re: A tool for recovering passwords from pixelized screenshots

#70

Earlier quoted context omitted.

People say the same thing about scans of printouts. But I guess there is a reason for those.

Those at least destroy any non-visible data.

I feel like contrast enhancement or similar would be able to bring that back.
Post reply on HN