Live data from Hacker News

Be careful what you copy: Invisibly inserting usernames into text

medium.com

121–130 of 200 posts

Re: Be careful what you copy: Invisibly inserting usernames into text

#121
post #115

How do I see those invisible characters in emacs or vim ? In emacs I thought that whitespace-mode would do the trick but apparently it doesn't.

To view it, I used:

    echo "Ctrl+V" | hd
Which makes a hexdump. Easily visible there.

If you're looking for Vim or Emacs specifically, I don't know.

Re: Be careful what you copy: Invisibly inserting usernames into text

#122
post #54

This sort of thing is one of the reasons I never liked the "noise texture" that appeared on MacOS X and other GUIs and websites not so long ago. I always thought my (former) OS was fingerprinting every screenshot I made. I'd love to be proven wrong, but you are never too careful.

This reminds me of a few years back when the internet identified a parody twitter account by analyzing iOS screenshots it posted. I just tried googling for the story but I can’t remember what the account was about. I think it was some sort of parody silicon valley account. It was a great story, if anyone remembers and can find the link.

That was Startup L. Jackson: https://www.quora.com/Who-is-behind-Startup-L-Jackson/answer...

Re: Be careful what you copy: Invisibly inserting usernames into text

#123

Earlier quoted context omitted.

I miss Eve so much, there isn't a mention of Eve on this site that doesn't get me pining for the game again. Sadly everyone i flew with no longer play :/ What the status of the game, last i looked i barely recognised any on the sov/influence map.

Still a lot of people playing it. A bit less subscribers, but not too bad. In 0.0 it's captials everywhere. People mine in Rorquals, people do PvE in Carriers and Supers. If you tackle a small ships doing PvE it opens a cyno and Captials jump in. They now have fighters that have good applications against smaller ships. So the good old rock paper scissors for shipssize in eve is not more. Still a diverse game, from so…

I struggled to get in because character progression was based solely on account being active, not play time.

And every guide for the game basically starts with "Subscribe, and don't log in for 3 months while you get your newbie pilot some basic skills, or if you do log in, don't do much because you're useless anyway"

Three. Months. How can a game be basically unplayable for newbies for ninety days?

Meh. Time gated games are never fun. The only thing worse than grinding in the game is having to grind hours out of the game.

Re: Be careful what you copy: Invisibly inserting usernames into text

#124

Earlier quoted context omitted.

Still a lot of people playing it. A bit less subscribers, but not too bad. In 0.0 it's captials everywhere. People mine in Rorquals, people do PvE in Carriers and Supers. If you tackle a small ships doing PvE it opens a cyno and Captials jump in. They now have fighters that have good applications against smaller ships. So the good old rock paper scissors for shipssize in eve is not more. Still a diverse game, from so…

I started in 2004, and played semi seriously for big bouts until probably 2012 or so. Every year or news story would get me back in...and i'd recognise less and less. I stopped myself reading eve politics not that long ago, as that was the bit that most interested me really. After the glory days of roaming in small fleets. The last time i logged in, a couple of years back. I contemplated moving my shit to somewhere e…

Just last week we got a patch were they capped the jump fatigue significantly. I don't know how much as I don't use jump drive, but it should be better now.

Also just sell your stuff and rebuy it. You don't need many ships to have some fun.

Roaming is .. not that common any more. What we do is live in a Wormhole, jump into 0.0 and try to tackle something big and hope they form a defense fleet.

Roll the hole to get a new 0.0 exit. Rinse and repeat

Re: Be careful what you copy: Invisibly inserting usernames into text

#125
post #94

Earlier quoted context omitted.

The safest thing is to retype it. But that doesn’t cover the risk of synonym/frequency fingerprinting discussed elsewhere in this thread.

What if you also did a random synonym replacement throughout the piece to destroy the watermarking? If the source is anonymous and hidden, then authenticity cannot be checked by the reader anyway, and so replacement without changing meaning is an acceptable change to protect sources.

Welcome to the new age of computer-powered math where anonymity is not a guarantee.

Plenty of discussions in this thread show why. Anonymous screenshot or picture? Image watermarks -> anything from subtle color changes, to sans/serif font changes, to word replacement. Anonymous text or summary? Word replacement, letter biasing encoding, etc. Anonymous audio? Inaudible frequencies, audible waveform deformation encoding, etc.

Nothing's out of the realm of possibility for the paranoid.

Re: Be careful what you copy: Invisibly inserting usernames into text

#126

Earlier quoted context omitted.

Still a lot of people playing it. A bit less subscribers, but not too bad. In 0.0 it's captials everywhere. People mine in Rorquals, people do PvE in Carriers and Supers. If you tackle a small ships doing PvE it opens a cyno and Captials jump in. They now have fighters that have good applications against smaller ships. So the good old rock paper scissors for shipssize in eve is not more. Still a diverse game, from so…

I struggled to get in because character progression was based solely on account being active, not play time. And every guide for the game basically starts with "Subscribe, and don't log in for 3 months while you get your newbie pilot some basic skills, or if you do log in, don't do much because you're useless anyway" Three. Months. How can a game be basically unplayable for newbies for ninety days? Meh. Time gated ga…

It's better now. You have more skill you start with, they removed some stupid skills and there are tons of corps that accept free to play chars.

The basic concept is still the same though. You skill with time. Which is nice, because sometimes I don't play for weeks. No "I have to grind X hours" to be on pair with my friends.

Re: Be careful what you copy: Invisibly inserting usernames into text

#127
post #66

Earlier quoted context omitted.

Just have the background image have a pattern to it that changes by user: you can encode stuff in a uniform-looking background by making some squares be color (255,255,255) and others be (255,255,254) for example: it would appear to be uniform white but not really.

The classic image stegonography technique is embedding bits in the least-significant-bit of each pixel, such that the differences do not produce visual changes but the information is preserved in the raw bytes of the file. The problem with this technique is that the encoded information will not survive a screenshot (since it’s in the LSB, the colors don’t actually change, just the raw bits). In order to survive a scr…

LSB alterations would be in lossless encoded images, like PNG (of the bit-depth was sufficient); but not in lossy image formats like JPEG.

Re: Be careful what you copy: Invisibly inserting usernames into text

#128

Earlier quoted context omitted.

That's just because the browser doesn't handle unicode well. The 'text-only', 'VGA' and 'textmode' are actually irrelevant. The behaviour you are seeing is down to programmer choice/laziness/missing support.

If you're only expecting ASCII text, then not being able to show anything else could even be considered a feature to reduce attack area, since any sort of Unicode trickery then becomes impossible.

There are more languages in the world than English, not supporting Unicode is not an option for most.

Re: Be careful what you copy: Invisibly inserting usernames into text

#129

Earlier quoted context omitted.

I started in 2004, and played semi seriously for big bouts until probably 2012 or so. Every year or news story would get me back in...and i'd recognise less and less. I stopped myself reading eve politics not that long ago, as that was the bit that most interested me really. After the glory days of roaming in small fleets. The last time i logged in, a couple of years back. I contemplated moving my shit to somewhere e…

Just last week we got a patch were they capped the jump fatigue significantly. I don't know how much as I don't use jump drive, but it should be better now. Also just sell your stuff and rebuy it. You don't need many ships to have some fun. Roaming is .. not that common any more. What we do is live in a Wormhole, jump into 0.0 and try to tackle something big and hope they form a defense fleet. Roll the hole to get a…

> Roaming is .. not that common any more.

Nor is gatecamping because some genius decided that instawarping bubble immunity (with optional covops cloak functionality) was a good idea so people could move through null in virtually perfect safety.

There have been so many changes which I find fundamentally stupid that it's hard for me to engage with the game these days. One day I'll probably play for a bit again though

Re: Be careful what you copy: Invisibly inserting usernames into text

#130

Earlier quoted context omitted.

The classic image stegonography technique is embedding bits in the least-significant-bit of each pixel, such that the differences do not produce visual changes but the information is preserved in the raw bytes of the file. The problem with this technique is that the encoded information will not survive a screenshot (since it’s in the LSB, the colors don’t actually change, just the raw bits). In order to survive a scr…

LSB alterations would be in lossless encoded images, like PNG (of the bit-depth was sufficient); but not in lossy image formats like JPEG.

Right, and since most screenshots are jpeg, that means LSB would likely be lost.
Post reply on HN