News for hackers. Stuff that matters.
Re:Pulling JPEGs out of thin air (2014) by lachenmayer on Sunday March 24, 2019 @06:40PM (#19479183)
Really cool! I recently happened to have a similar idea when I came across the rust-fuzz crate, which abstracts over afl, honggfuzz etc.

If you're interested, my notes are here: https://github.com/lachenmayer/insta-fuzz

I ended up "cheating" a little bit by providing a valid JPEG header - I found that rust-fuzz seemed to take far too long to generate any valid JPEG at all by starting from eg. an empty file. But maybe I just wasn't patient enough, after all I was only running it on my laptop :)

Re:Pulling JPEGs out of thin air (2014) by stordoff on Sunday March 24, 2019 @07:51PM (#19479421)
The author does note in the comments:

> Note that by default, afl-fuzz runs on a single core, so it may take several days to get results

Re:Pulling JPEGs out of thin air (2014) by yjftsjthsd-h on Sunday March 24, 2019 @10:41PM (#19479971)
That's a little annoying, but it looks like it's not too terrible to fix: https://github.com/mirrorer/afl/blob/master/docs/parallel_fu...
Re:Pulling JPEGs out of thin air (2014) by Cthulhu_ on Monday March 25, 2019 @08:01AM (#19481771)
Would a BMP be easier to generate? I'm sure you'd get 99.99% static though.
Re:Pulling JPEGs out of thin air (2014) by lachenmayer on Monday March 25, 2019 @05:12PM (#19486777)
Yeah definitely, a BMP doesn't really have any "interesting" structure though because it's more or less just an array of pixels. The visual artifacts in JPEG files come from all the downsampling / blocks / cosine transform stuff which is really what I wanted to explore.
Re:Pulling JPEGs out of thin air (2014) by Twirrim on Sunday March 24, 2019 @07:14PM (#19479307)
I've used this in the past (inspired by this) to produce some valid json. Of course, a jpeg is at least pretty. Valid JSON is still just boring old JSON.
Re:Pulling JPEGs out of thin air (2014) by piinbinary on Sunday March 24, 2019 @06:34PM (#19479163)
That could make an interesting piece of art
Re:Pulling JPEGs out of thin air (2014) by k9wolf on Monday March 25, 2019 @02:05AM (#19480603)
Quite abstract art but true, interesting how that happens
Re:Pulling JPEGs out of thin air (2014) by Double_a_92 on Monday March 25, 2019 @03:19AM (#19480792)
Where did it get that "Hello Kitty" image from?
Re:Pulling JPEGs out of thin air (2014) by nomadiccoder on Monday March 25, 2019 @12:00AM (#19480228)
Why do some websites eternally not let you back to the previous page when clicking the back button?
Re:Pulling JPEGs out of thin air (2014) by hannob on Monday March 25, 2019 @04:27AM (#19481014)
It's a redirect.

The link goes to the HTTP version of blogspot. This redirects you to HTTPS. If you click "back" you are back at the HTTP version, which will redirect you again.

Yeah, browsers could be smarter about this.

Re:Pulling JPEGs out of thin air (2014) by jorams on Monday March 25, 2019 @05:30AM (#19481190)
> Yeah, browsers could be smarter about this

I'm not sure they could. If the http:// URL would have responded with a redirect to https://, the back button would have worked just fine. Instead it responds with a perfectly normal page that then does this:

    if (location.protocol == 'http:') location.protocol = 'https:';
Blogspot is such a mess, it's the perfect example of Google not necessarily being technically competent.
Re:Pulling JPEGs out of thin air (2014) by Cthulhu_ on Monday March 25, 2019 @08:01AM (#19481777)
Yeah that should be a proper permanent redirect on a webserver level. Did Google make Blogspot themselves or did they buy it and never made it conform to normal web page practices?
Re:Pulling JPEGs out of thin air (2014) by tsukurimashou on Monday March 25, 2019 @11:31AM (#19483389)
Google bought Blogger in 2003, Blogger was launched in 1999