News for hackers. Stuff that matters.
Re:Google May Be Stealing Mobile Traffic by walshemj on Monday October 17, 2016 @07:11AM (#12724023)
Every time I look at a website its shocking how no one even does basic image optimisation using PS on the images.

This is such a trivial optimisation it makes you wonder about the level of competency of the average web development company.

Re:Google May Be Stealing Mobile Traffic by hanginghyena on Monday October 17, 2016 @12:59PM (#12726834)
=> "makes you wonder about the level of competency of the average web development company"

Our competency on projects where we are being paid a full domestic consulting rate is quite high, thank you.

Now, if you're asking us to compete with cut-rate bids from some online freelancer exchange, we will reduce the level of service and QA to match our competitors in that space....

Eg. you may have Nordstrom's service for a Nordstrom's price. Wal-mart service for a Wal-mart price. But don't expect Nordstrom's service for a Wal-mart price; that usually isn't going to fly....

Re:Google May Be Stealing Mobile Traffic by jasonkostempski on Monday October 17, 2016 @07:39AM (#12724146)
Is there an alternative that doesn't require a monthly subscription?
Re:Google May Be Stealing Mobile Traffic by criddell on Monday October 17, 2016 @07:48AM (#12724193)
http://www.imagemagick.org/script/convert.php

You can insert ImageMagick somewhere into your production pipeline. It's excellent software.

Re:Google May Be Stealing Mobile Traffic by lmm on Monday October 17, 2016 @07:54AM (#12724233)
Well other than being riddled with security holes. It has its place, but never use it on user-submitted images.
Re:Google May Be Stealing Mobile Traffic by criddell on Monday October 17, 2016 @09:25AM (#12724750)
Well, the person I'm responding to is using Photoshop to resize images. Presumably that isn't for user submitted content.
Re:Google May Be Stealing Mobile Traffic by microcolonel on Monday October 17, 2016 @09:04AM (#12724621)
While that may have been true in 2014, today it's hard to find an exploitable bug affecting a major image format parser in ImageMagick. Assuming you aren't using unsanitized user-provided parameters on the command line with it, it should be fine unless your attacker is very motivated.
Re:Google May Be Stealing Mobile Traffic by nitrogen on Monday October 17, 2016 @09:56AM (#12725006)
There was an RCE vulnerability this year: https://imagetragick.com/
Re:Google May Be Stealing Mobile Traffic by tetromino_ on Monday October 17, 2016 @12:28PM (#12726543)
ImageTragick did not affect major image formats; it was a vulnerability in the parser for ImageMagick's scripting languages [1]. The real problem was that support for scripting was enabled by default, and there was no obvious big red button to disable it.

[1] Like MVG (http://www.imagemagick.org/script/magick-vector-graphics.php) and MSL (http://www.imagemagick.org/script/conjure.php)

Re:Google May Be Stealing Mobile Traffic by Veratyr on Monday October 17, 2016 @09:29PM (#12731312)
I'd argue that you should simply sandbox it. If performance is an issue, throw it in a VM or container with a simple socat + fork + TCP-LISTEN on a socket and pipe data in/out over TCP.
Re:Google May Be Stealing Mobile Traffic by theandrewbailey on Monday October 17, 2016 @08:55AM (#12724567)
You can get some pretty good images out of almost any image editing software, even GIMP. First, know which format to use, and size your image appropriately.

For JPEGs: use chroma downsampling, and don't go above 80% quality unless absolutely necessary. If your software has a preview function, use it. Encode with MozJPEG if you can.

For PNGs: compress the hell out of them. There's several tools that can compress them further.

Re:Google May Be Stealing Mobile Traffic by pbhjpbhj on Monday October 17, 2016 @02:33PM (#12727841)
Save For Web is a useful plugin for GIMP to this end.
Re:Google May Be Stealing Mobile Traffic by driverdan on Monday October 17, 2016 @08:15AM (#12724332)
ImageOptim is better than PS: https://imageoptim.com

You still need to resize your images appropriately but ImageOptim will do the rest. It passes images through a series of image optimization libs.

Re:Google May Be Stealing Mobile Traffic by walshemj on Monday October 17, 2016 @08:11AM (#12724307)
There is jpegtran and other cli based tools - but PS does tend to perform better.
Re:Google May Be Stealing Mobile Traffic by Xixi on Monday October 17, 2016 @03:08PM (#12728240)
If you are using a Mac I recommend this little known gem: Graphic Converter. It supports hundreds of image formats. First used it on System 7, such a long time ago! It has of course been ported to MacOS X / OS X / macOS.

https://www.lemkesoft.de/en/products/graphicconverter/