#qi-hardware IRC log for Monday, 2017-02-13

DocScrutinizer05or you create a true binary to extract the hidden data, and name it 123 or dir or whatever you like00:00
DocScrutinizer05ssh -i <(x goatse.jpg) then00:01
DocScrutinizer05s/x /dir /00:01
DocScrutinizer05if you're smart, you make it spit out "%s isn't a directory" to STDERR, and other than that silently fail when it can't find your magic searchstring that marks the beginning of the hidden data00:03
Action: DocScrutinizer05 thinks "do that on android" and shudders00:04
wpwrakanyway, good steganography would use something like: len = encrypt(buffer, key, data); p = image; for (i = 0; i != len; i++) for (j = 0; j != 8; j++) *p++ = (*p & ~1) | !!((buffer[i] >> j) & 1);00:06
wpwrakwhere "encrypt" would preferably have no easily recognized static content (header or such)00:07
DocScrutinizer05looks good but you don't want that in any plaintext file on your device, right?00:07
wpwrakyes, you don't carry such sophisticated hacker tools with you when crossing the border :)00:08
DocScrutinizer05sure you could simply `mv my-preferred-stegano-tool dir`00:09
DocScrutinizer05there are a few of them00:09
DocScrutinizer05but you never know if customs aka homeland security has a special version of file(1) for finding any such suspicious tools, even when they are binaries00:10
DocScrutinizer05don't know if ssh client is already suspicious to have on your linux device, but I don't see a less suspicious approach (except maybe browser embedded terminal)00:12
DocScrutinizer05and that would create trouble from browser history, unless you take special care to enter such embedded terminal only via 'interactive content' and not via a special URL00:13
DocScrutinizer05good: http://wstaw.org/m/2017/02/13/plasma-desktopd17764.png   poor: http://myserver.com/cli00:16
DocScrutinizer05the really nice part: http://paste.opensuse.org/97554917 http://wstaw.org/m/2017/02/13/Test.jpg FWIW00:41
DocScrutinizer05wget http://wstaw.org/m/2017/02/13/Test.jpg -O -|grep -a -A99 begin |uudecode00:42
DocScrutinizer05wpwrak: btw for your stegano above you want png or sth like that, for sure not jpg or any other compressed format ;-)01:06
DocScrutinizer05.wav is excellent for leat-significant-bit stegano, using 16bit wordsize01:09
wpwrakyeah, jpeg is a little harder :)01:38
wpwrakbtw, regarding the dangers of crossing borders: http://www.theverge.com/2017/2/12/14583124/nasa-sidd-bikkannavar-detained-cbp-phone-search-trump-travel-ban22:50
--- Tue Feb 14 201700:00

Generated by irclog2html.py 2.9.2 by Marius Gedminas - find it at mg.pov.lt!