News for hackers. Stuff that matters.

A comment on Exploiting ACropalypse: Recovering Truncated PNGs. Parent comment

Re:Exploiting ACropalypse: Recovering Truncated PNGs by Retr0id on Saturday March 18, 2023 @04:42PM (#35212905)
Discord doesn't strip EXIF from PNGs, only JPEGs
[ Parent | on HN ]
Re:Exploiting ACropalypse: Recovering Truncated PNGs by jsheard on Saturday March 18, 2023 @04:48PM (#35212955)
Seriously? What's the reasoning behind that?
[ Parent | on HN ]
Re:Exploiting ACropalypse: Recovering Truncated PNGs by Retr0id on Saturday March 18, 2023 @04:51PM (#35212978)
It's rare to see PNGs in-the-wild containing EXIF data, it's a feature that's only been in the spec since ~2017. I'm actually looking for one to double-check my statement about discord, but I can't find any.

Edit: I made my own. I can confirm that the exif chunk was not stripped. https://cdn.discordapp.com/attachments/541730746805649476/10...

[ Parent | on HN ]
Re:Exploiting ACropalypse: Recovering Truncated PNGs by rtldg on Monday March 20, 2023 @03:40AM (#35228433)
That's interesting. I've seen a couple of rotated PNGs before which I assumed were caused by Discord stripping the EXIF and orientation data. Found a PNG like that without EXIF from May 2022 so I wonder if Discord stopped stripping or if it was stripped on the person's device somewhere.
[ Parent | on HN ]