Google May Be Stealing Mobile Traffic

Re:Google May Be Stealing Mobile Traffic by criddell on Monday October 17, 2016 @07:48AM (#12724193)

http://www.imagemagick.org/script/convert.php

You can insert ImageMagick somewhere into your production pipeline. It's excellent software.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by lmm on Monday October 17, 2016 @07:54AM (#12724233)

Well other than being riddled with security holes. It has its place, but never use it on user-submitted images.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by criddell on Monday October 17, 2016 @09:25AM (#12724750)

Well, the person I'm responding to is using Photoshop to resize images. Presumably that isn't for user submitted content.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by microcolonel on Monday October 17, 2016 @09:04AM (#12724621)

While that may have been true in 2014, today it's hard to find an exploitable bug affecting a major image format parser in ImageMagick. Assuming you aren't using unsanitized user-provided parameters on the command line with it, it should be fine unless your attacker is very motivated.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by nitrogen on Monday October 17, 2016 @09:56AM (#12725006)

There was an RCE vulnerability this year: https://imagetragick.com/

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by tetromino_ on Monday October 17, 2016 @12:28PM (#12726543)

ImageTragick did not affect major image formats; it was a vulnerability in the parser for ImageMagick's scripting languages [1]. The real problem was that support for scripting was enabled by default, and there was no obvious big red button to disable it.

[1] Like MVG (http://www.imagemagick.org/script/magick-vector-graphics.php) and MSL (http://www.imagemagick.org/script/conjure.php)

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by Veratyr on Monday October 17, 2016 @09:29PM (#12731312)

I'd argue that you should simply sandbox it. If performance is an issue, throw it in a VM or container with a simple socat + fork + TCP-LISTEN on a socket and pipe data in/out over TCP.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by theandrewbailey on Monday October 17, 2016 @08:55AM (#12724567)

You can get some pretty good images out of almost any image editing software, even GIMP. First, know which format to use, and size your image appropriately.

For JPEGs: use chroma downsampling, and don't go above 80% quality unless absolutely necessary. If your software has a preview function, use it. Encode with MozJPEG if you can.

For PNGs: compress the hell out of them. There's several tools that can compress them further.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by pbhjpbhj on Monday October 17, 2016 @02:33PM (#12727841)

Save For Web is a useful plugin for GIMP to this end.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by driverdan on Monday October 17, 2016 @08:15AM (#12724332)

ImageOptim is better than PS: https://imageoptim.com

You still need to resize your images appropriately but ImageOptim will do the rest. It passes images through a series of image optimization libs.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by walshemj on Monday October 17, 2016 @08:11AM (#12724307)

There is jpegtran and other cli based tools - but PS does tend to perform better.

[ Parent | on HN ]

Re:Google May Be Stealing Mobile Traffic by Xixi on Monday October 17, 2016 @03:08PM (#12728240)

If you are using a Mac I recommend this little known gem: Graphic Converter. It supports hundreds of image formats. First used it on System 7, such a long time ago! It has of course been ported to MacOS X / OS X / macOS.

https://www.lemkesoft.de/en/products/graphicconverter/

[ Parent | on HN ]