Re:Exploiting ACropalypse: Recovering Truncated PNGs
by olliej on Monday March 20, 2023 @02:03PM
(#35235841)
Server side filtering isn't relevant. A user editing or removing things from their photo does not expect that data to exist on the image uploaded to a server.
[ Parent
| on HN ]
Re:Exploiting ACropalypse: Recovering Truncated PNGs
by creatonez on Tuesday March 21, 2023 @05:19PM
(#35252723)
The uppermost comment in this thread is making the suggestion to use server-side filtering just in case something goes wrong with end-user software. So that's why other commenters were using this assumption and ignoring the software itself.