News for hackers. Stuff that matters.
Re:NYT journalist hacked with Pegasus after reporting on pre... by tablespoon on Sunday October 24, 2021 @09:08PM (#28983498)
> I really hope the blur on the picture (https://citizenlab.ca/wp-content/uploads/2021/10/Hubbard-Ima...) isn't hiding anything actually important because that can almost certainly be de-blurred with the right tooling.

Yeah, the right way to use blurring is to mockup a lookalike for content you want to hide, then blur the mockup.

Re:NYT journalist hacked with Pegasus after reporting on pre... by Stupulous on Sunday October 24, 2021 @09:36PM (#28983643)
You don't even need this. I searched "unblur" in Google Play Store, downloaded the first result, tweaked the settings a touch, and I could make out the characters. The whole process took a couple minutes. If the data actually needs to be hidden, this picture should be taken down.
Re:NYT journalist hacked with Pegasus after reporting on pre... by notyourwork on Sunday October 24, 2021 @10:54PM (#28984063)
It sounds like you didn’t read the post you are replying to. They indicated a mock copy should be made to avoid techniques reconstructing the data.
Re:NYT journalist hacked with Pegasus after reporting on pre... by Stupulous on Sunday October 24, 2021 @11:18PM (#28984177)
Yeah, I replied to the wrong comment, sorry. I navigated away and skimmed to figure out where I was when I came back.
Re:NYT journalist hacked with Pegasus after reporting on pre... by deserted on Thursday October 28, 2021 @02:31AM (#29023050)
if you generate a lookalike full of UUIDs, you don't really need to blur except for dramatic effect I guess.
Re:NYT journalist hacked with Pegasus after reporting on pre... by fabianhjr on Sunday October 24, 2021 @10:01PM (#28983781)
I just go solid opaque bar. Way easier to do and harder to screw up.
Re:NYT journalist hacked with Pegasus after reporting on pre... by johnfn on Sunday October 24, 2021 @10:58PM (#28984083)
Amusingly enough, people have even screwed this up. I recall some government agency trying to censor data with a black bar, but the problem was that the data was in a SVG-like document, so people could just delete the bars from the document and see the apparently-censored text.
Re:NYT journalist hacked with Pegasus after reporting on pre... by mjevans on Monday October 25, 2021 @02:46AM (#28985061)
I built a redaction process for a small company once.

My critical security step was rendering out the PDF as individual flat image files, then re-assembling it like a traditionally photo-copied document.

That way the loss-full operation is enforced, at the cost of forcing end users to OCR unsearchable image-scan (like) PDFs.

Re:NYT journalist hacked with Pegasus after reporting on pre... by hyper_dynamics on Monday October 25, 2021 @05:36AM (#28985954)
It's the only way to be sure!
Re:NYT journalist hacked with Pegasus after reporting on pre... by raxxorrax on Monday October 25, 2021 @08:15AM (#28986910)
You could replace the censored text with gibberish before blacking it out. Or some secret message for QAnons to find.
Re:NYT journalist hacked with Pegasus after reporting on pre... by pvillano on Monday October 25, 2021 @07:20PM (#28994444)
well if you had an open (.odf) or openable (.doc≈xml) format you could replace strings and be sure something was gone
Re:NYT journalist hacked with Pegasus after reporting on pre... by eeegnu on Monday October 25, 2021 @01:05AM (#28984629)
It would be funny to place fake data behind the removable bars for tech savvy people to find.
Re:NYT journalist hacked with Pegasus after reporting on pre... by geoduck14 on Monday October 25, 2021 @11:33AM (#28988980)
> It would be funny to place fake data behind the removable bars for tech savvy people to find.

Tech savvy people, but also journalists

https://arstechnica.com/tech-policy/2021/10/missouri-gov-cal...

Re:NYT journalist hacked with Pegasus after reporting on pre... by tait on Sunday October 24, 2021 @11:40PM (#28984286)
I remember a version of this happening with PDFs
Re:NYT journalist hacked with Pegasus after reporting on pre... by lelandfe on Monday October 25, 2021 @04:30AM (#28985657)
Yep - Apple wound up adding a “Redact” tool to Preview.app for PDFs, likely in response to all the people who just drew shapes over selectable sensitive text.

https://eclecticlight.co/2020/12/11/how-effective-and-safe-i...

Re:NYT journalist hacked with Pegasus after reporting on pre... by franga2000 on Monday October 25, 2021 @02:05AM (#28984879)
The EU has redacted PDFs this way a number of times, but I don't think anything truly sensitive ever leaked.
Re:NYT journalist hacked with Pegasus after reporting on pre... by ghostly_s on Monday October 25, 2021 @01:08AM (#28984642)
This has happened with PDFs many, many times.
Re:NYT journalist hacked with Pegasus after reporting on pre... by rincebrain on Monday October 25, 2021 @12:32AM (#28984524)
I believe the US government did this at least once, by implementing the black bars in a PDF as a separate object, so the unredacted item was intact in the files they shared.

Whoops.

Re:NYT journalist hacked with Pegasus after reporting on pre... by bayindirh on Monday October 25, 2021 @02:26AM (#28984965)
I remember that. Unredacted versions were also circulated.
Re:NYT journalist hacked with Pegasus after reporting on pre... by stronglikedan on Monday October 25, 2021 @10:08AM (#28987975)
> just delete the bars

I think you mean "illegally hack the black bars".

Re:NYT journalist hacked with Pegasus after reporting on pre... by tablespoon on Monday October 25, 2021 @09:23PM (#28995320)
> I just go solid opaque bar. Way easier to do and harder to screw up.

There may be graphic design reasons you don't want to do that. A big black redaction bar isn't much of an illustration.