News for hackers. Stuff that matters.

A comment on GCHQ's Boiling Frogs paper on software development.

Re:GCHQ's Boiling Frogs paper on software development by wyzellak on Monday May 16, 2016 @05:53AM (#11705294)
http://imgur.com/a/pbazB Contents of this PDF, page by page, in JPGs.
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by distances on Monday May 16, 2016 @06:42AM (#11705451)
PNG would be more fitting for content like this.
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by linuxlizard on Monday May 16, 2016 @09:17AM (#11706035)
(In case folks don't know, PNG better for text because JPG's compression introduces "ringing" artifacts around sharp edges, such as the black/white transition of text.) https://en.wikipedia.org/wiki/Ringing_artifacts
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by xrorre on Monday May 16, 2016 @10:22AM (#11706421)
JPGs are also a lot safer as PDFs can ping remote resources using carefully hidden beacon images.

Although that said, I sometimes use this to see who opened my files. I once left hundreds of these on a very popular cloud hosting provider (not naming names), and somebody working there was stupid to open the PDF on a machine connected to the internet, thereby proving abuse by employees and proving any random stranger can access 'your' files in the so called 'cloud'.

Look up 'honeydocs'. Some interesting articles about this technique

[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by DarkLinkXXXX on Monday May 16, 2016 @11:20AM (#11706859)
Is that effective for non-adobe pdf viewers? What about the ones that disable javascript?
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by nexar on Tuesday May 17, 2016 @10:51AM (#11714109)
Look into canarytokens. Plenty of file types that do not rely on JavaScript nor macros etc
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by MichaelGG on Monday May 16, 2016 @01:48PM (#11708077)
Maybe it was an indexer that for whatever reason runs the full PDF handling code?
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by kchoudhu on Monday May 16, 2016 @10:21AM (#11706416)
Are the contents of the link so very pixelated that you are unable to follow along without PNG conversion? If yes, may I recommend a quick trip to your local optometrist?
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by rplnt on Monday May 16, 2016 @06:26AM (#11705398)
My question is, why?
[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by ianpurton on Monday May 16, 2016 @06:28AM (#11705403)
It's a PDF from GCHQ. It's almost certainly loaded with a surveillance payload.

Probably even some sort of of brainwave scanner.

[ Parent | on HN ]
Re:GCHQ's Boiling Frogs paper on software development by based2 on Monday May 16, 2016 @07:34AM (#11705634)
https://helpx.adobe.com/security/products/acrobat/apsb16-14....

https://www.cvedetails.com/product/497/Adobe-Acrobat-Reader....

[ Parent | on HN ]