Earlier quoted context omitted.
Yep, just replace the original password for "password" and pixelate that, if it really must look like a real password. And make sure to never use "password" as a real password, but that's a different level of shooting oneself in the foot.
> replace the original password for "password" and pixelate that, if it really must look like a real password Or replace the original password for "password" and leave it at that.
A tool for recovering passwords from pixelized screenshots
121–130 of 130 posts
Re: A tool for recovering passwords from pixelized screenshots
#122This kind of techniques have been discussed here many times. See for example: https://news.ycombinator.com/item?id=8078747 I think one of the reasons people use blurring/pixelation is that it looks nicer than black boxes. Wondering if it would make sense to build a tool that renders a pixelated version of lorem ipsum or something like that. It would be secure while also looking good.
The added benefit of this would be wasting the time of a would-be hacker
Re: A tool for recovering passwords from pixelized screenshots
#123Earlier quoted context omitted.
Decensoring Hentai with Deep Neural Networks: https://github.com/deeppomf/DeepCreamPy
Interesting, but seems to only work on static cartoon images where regions to uncensor have been manually identified.
Re: A tool for recovering passwords from pixelized screenshots
#124Asking for a friend: what's current state of the art in reversing pixelated censorship in Japanese movies? Obviously a tougher problem because the original is not known, but you'd think a well-trained GNN should be able to make a pretty good guess.
Re: A tool for recovering passwords from pixelized screenshots
#125To preserve the same aesthetics (a blurred username or identifier that doesn't call attention to itself) but would make it impossible to match against?
E.g. in Photoshop, the "Filter > Pixelate > Mosaic" option should have a checkbox called "Secure" or "Security noise". Or there should be a separate filter called "Pixelate > Redact". Ideally it would use some intelligence to figure out the size of characters/symbols in the selected area and automatically figure out the right combination of pixel size and noise.
Re: A tool for recovering passwords from pixelized screenshots
#126Re: A tool for recovering passwords from pixelized screenshots
#127Seems like pixelization algorithms should implement some degree of brightness and chromatic random noise in order to defeat this? To preserve the same aesthetics (a blurred username or identifier that doesn't call attention to itself) but would make it impossible to match against? E.g. in Photoshop, the "Filter > Pixelate > Mosaic" option should have a checkbox called "Secure" or "Security noise". Or there should be…
Re: A tool for recovering passwords from pixelized screenshots
#128Earlier quoted context omitted.
Can't facepalm enough. Just, amazing incompetence.
But customers are always right, which is why Acrobat these days has special features to do this. Besides deleting letters under it could affect layouts.
Which is in and of itself a security risk. Not only can the length of the redaction give an estimate on the length of the password, but for variable width fonts, could even rule out many passwords using pixel measurements between the text on either side.
Re: A tool for recovering passwords from pixelized screenshots
#129Is "pixelized" the norm somewhere? I'm used to "pixelated."
"pixelated" has a pre-existing meaning in English (discombobulated, airheaded, tipsy). An English speaker already familiar with the word might choose "pixelized" to avoid the collision.
Re: A tool for recovering passwords from pixelized screenshots
#130Earlier quoted context omitted.
"Depix Error: Please report on GitHub"
"All Depix users are reported to the FBI."