News for hackers. Stuff that matters.
Re:A tool for recovering passwords from pixelized screenshots by rriepe on Sunday December 06, 2020 @05:05PM (#25327056)
It's not. There's never going to be a tool that does this with black bars.

The only benefit I can think of is legitimacy. Having something blurred there suggests that there was actually something there.

Re:A tool for recovering passwords from pixelized screenshots by xorcist on Sunday December 06, 2020 @05:35PM (#25327298)
There is still a risk to leak the length of the password. If the font is known and the size of the rendered text can be inferred that would limit the search space considerably.
Re:A tool for recovering passwords from pixelized screenshots by davchana on Sunday December 06, 2020 @05:52PM (#25327429)
Personal Snippet, if I want to hide/cross something I wrote on paper, I usually change letters to something else, like u to g, i to d, nothing preplanned, whatever comes in mind, before I cross line the text in forward slashes, backword slashes, & in horizontal lines.
Re:A tool for recovering passwords from pixelized screenshots by KineticLensman on Monday December 07, 2020 @06:25AM (#25331185)
I sometimes write down on paper my banking passphrase (from which the bank makes me select letters at specific position). Afterwards I overwrite it a few times with the alphabet and a few numbers and other random letters. It's totally unreadable.
Re:A tool for recovering passwords from pixelized screenshots by bonoboTP on Sunday December 06, 2020 @09:01PM (#25328664)
I thought I was the only one!

Such a great trick. Just write random letters or even random sentences over your handwriting perhaps 2 or 3 times, then heavily cross it out and it's impossible to recover.

Re:A tool for recovering passwords from pixelized screenshots by nickjj on Sunday December 06, 2020 @06:47PM (#25327803)
> There is still a risk to leak the length of the password. If the font is known and the size of the rendered text can be inferred that would limit the search space considerably.

I do a lot of screencast videos and what I typically do is put a black rectangle well past the point where my secret text really ends.

If my secret is:

    mysupersecretpassword
You might end up seeing a black bar of:

    ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||

What I'm most afraid of is accidentally having literally 1 frame of video where the bar isn't present. This is super easy to do if you're just scrolling through a timeline while editing. You need to really dive in and move frame by frame to ensure you get everything. I usually extend it a few frames in either direction just to be safe too.
Re:A tool for recovering passwords from pixelized screenshots by rebane2001 on Sunday December 06, 2020 @07:35PM (#25328108)
Your fear is one of the reasons I have z/x bound to 1 frame backwards/forwards in my editing software, it lets me quickly look for such issues.

However, glitches in editing software can still rarely occur, so for very confidential footage I first censor it, render it out in an intermediary format, check the render to make sure it's 100% correctly censored and then use that rendered footage to continute editing.

Also, mixing/messing with frame rates is an easy way to shoot yourself in the foot.

Re:A tool for recovering passwords from pixelized screenshots by will_pseudonym on Sunday December 06, 2020 @11:43PM (#25329379)
Hi, I'm thinking of learning how to edit videos. What software do you use, and what is the best way to learn it, for someone who isn't a master at photo/video editing, but is a power user of computers generally?
Re:A tool for recovering passwords from pixelized screenshots by KineticLensman on Monday December 07, 2020 @06:39AM (#25331240)
YMMV but I used a free trial of Adobe Premiere Pro to learn the basic concepts for editing clips produced by my Nikon D850 DSLR. At work I had access to Premiere Elements and decided this was good enough for me, as a hobbyist, given that going with Pro would massively increase my existing monthly fee to Adobe. So I paid the one-off license fee for Elements.

I'm currently looking at BlackMagic's DaVinci Resolve, which has a quite well featured video and audio editing package for free. But 'all' the free version does is edit video clips. You have to pay for additional functionality. Premiere Elements, in contrast, has lots of useful things like creating/handling non-video assets such as text for titles and credits, loads of (sometimes cheesy) clip transitions, etc etc. Resolve may be okay if you hate Adobe.

You'll need something more sophisticated if you are targeting non-standard playback devices, or want to participate in collaborative workflows, or grade raw sensor clips (assuming you can get this data off your video device). As a real power user you might also want to look at ffmpeg, something I simply haven't had time to get my head round.

Again, YMMV.

[Edit] I consider myself an 'advanced' stills photographer, who is much happier using manual rather than auto settings. When I started with video, however, I quickly discovered how much I didn't know. For example, what is the relationship between the shutter speed of the camera and the frame rate of the video? This was helpfully ignored in the camera's manual, and took some googling to find out. Video autofocus is also pants, on the D850, for the type of wildlife and action photography I like (it always refocuses just as the bird lands). So I'm teaching myself to use manual focusing, just like they do in the movies. A video tripod head was also essential so I could pan, elevate and focus with only two hands rather than three.

Re:A tool for recovering passwords from pixelized screenshots by nickjj on Monday December 07, 2020 @07:03AM (#25331355)
> I'm currently looking at BlackMagic's DaVinci Resolve, which has a quite well featured video and audio editing package for free. But 'all' the free version does is edit video clips. You have to pay for additional functionality. Premiere Elements, in contrast, has lots of useful things like creating/handling non-video assets such as text for titles and credits, loads of (sometimes cheesy) clip transitions, etc etc.

The free version lets you create titles, animations, transitions and you get access to their after effects comparable tool for fancy animations as well as color grading and audio / video editing.

It's a very reasonable free offering. I use it all the time to edit podcasts. I want to use it for editing video too but I have issues with it adding artifacts to the rendered videos, I think it's because it doesn't like my 6 year old GTX 750ti.

Re:A tool for recovering passwords from pixelized screenshots by thotsBgone on Sunday December 06, 2020 @05:15PM (#25327139)
Yeah I think blurring is more aesthetic, and until recently was seemingly just as secure. It reminds me of how people have used the Photoshop swirl tool to obscure faces, but you could just use the swirl tool in the other direction to undo the effect.
Re:A tool for recovering passwords from pixelized screenshots by Lammy on Sunday December 06, 2020 @09:23PM (#25328771)
Re:A tool for recovering passwords from pixelized screenshots by est31 on Sunday December 06, 2020 @05:27PM (#25327229)
Black bars alone may still leak info.

First, if you add black bars on your own and don't use professional redaction features of software, you might miss the OCR text layer of the PDF, or the bar might be added as a separate object entirely which means it can also be removed later on.

Second, if you don't use monospace text, the width of the text you are redacting will reveal information about it. That's why monospace fonts are so commonly used in the intelligence community for example.

Third, if you just add a black bar to a screenshot, there might be residual values of the text left in adjacent seemingly white portions of the image, but they might not be entirely white due to compression effects. Better you run it through a filter before publishing.

Re:A tool for recovering passwords from pixelized screenshots by dragonwriter on Sunday December 06, 2020 @08:38PM (#25328541)
> Second, if you don't use monospace text, the width of the text you are redacting will reveal information about it.

If you do use monospace text, width reveals the exact redacted character count. If you don't use monospace text, it constrains the possible contents in a more complicated way, but it leaks information either way.

Re:A tool for recovering passwords from pixelized screenshots by spoonjim on Monday December 07, 2020 @03:26AM (#25330328)
It leaks much less information when monospaced, although that information is easier to retrieve. Anyone can just visually inspect and see exactly how many monospaced characters were removed, but someone with the right tools and skills can narrow down the potential characters quite a bit if it's a short piece of non monospaced text.
Re:A tool for recovering passwords from pixelized screenshots by davchana on Sunday December 06, 2020 @05:53PM (#25327443)
Yes, in pdf, add bars, & then print it again as pdf, but as image.
Re:A tool for recovering passwords from pixelized screenshots by jbverschoor on Sunday December 06, 2020 @06:37PM (#25327750)
Even black bars all leak the face that there’s something hidden
Re:A tool for recovering passwords from pixelized screenshots by davchana on Sunday December 06, 2020 @07:21PM (#25328007)
Do you mean the typeface/font? If it is just a word we are hiding in a sentence/paragraph; it would be like fill in a blank task for reader; much more chance to guess from context. There, the leaking length will not matter.
Re:A tool for recovering passwords from pixelized screenshots by davchana on Monday December 07, 2020 @12:37AM (#25329616)
Oh sorry, my bad, you mean fact, not face. Yes, I agree.
Re:A tool for recovering passwords from pixelized screenshots by jbverschoor on Monday December 07, 2020 @03:36AM (#25330382)
ah. yeah fact :-)
Re:A tool for recovering passwords from pixelized screenshots by spoonjim on Monday December 07, 2020 @03:24AM (#25330312)
This is why the real professionals use the same mechanism they always have: cut the offending text out of the paper with an x-Acto knife and make a photocopy.
Re:A tool for recovering passwords from pixelized screenshots by Scoundreller on Monday December 07, 2020 @04:11AM (#25330540)
Also helps prevent any issues related to double sided printing and bleedthrough.
Re:A tool for recovering passwords from pixelized screenshots by antegamisou on Sunday December 06, 2020 @08:33PM (#25328515)
> First, if you add black bars on your own and don't use professional redaction features of software, you might miss the OCR text layer of the PDF, or the bar might be added as a separate object entirely which means it can also be removed later on.

Looking at you, Preview on macOS.