| 00:00.32 | DocScrutinizer05 | or you create a true binary to extract the hidden data, and name it 123 or dir or whatever you like |
| 00:01.19 | DocScrutinizer05 | ssh -i <(x goatse.jpg) then |
| 00:01.39 | DocScrutinizer05 | s/x /dir / |
| 00:01.39 | qi-bot | DocScrutinizer05 meant: "ssh -i <(dir goatse.jpg) then" |
| 00:03.43 | DocScrutinizer05 | if you're smart, you make it spit out "%s isn't a directory" to STDERR, and other than that silently fail when it can't find your magic searchstring that marks the beginning of the hidden data |
| 00:04.46 | DocScrutinizer05 | thinks "do that on android" and shudders |
| 00:06.48 | wpwrak | anyway, good steganography would use something like: len = encrypt(buffer, key, data); p = image; for (i = 0; i != len; i++) for (j = 0; j != 8; j++) *p++ = (*p & ~1) | !!((buffer[i] >> j) & 1); |
| 00:07.23 | wpwrak | where "encrypt" would preferably have no easily recognized static content (header or such) |
| 00:07.25 | DocScrutinizer05 | looks good but you don't want that in any plaintext file on your device, right? |
| 00:08.12 | wpwrak | yes, you don't carry such sophisticated hacker tools with you when crossing the border :) |
| 00:09.06 | DocScrutinizer05 | sure you could simply `mv my-preferred-stegano-tool dir` |
| 00:09.20 | DocScrutinizer05 | there are a few of them |
| 00:10.17 | DocScrutinizer05 | but you never know if customs aka homeland security has a special version of file(1) for finding any such suspicious tools, even when they are binaries |
| 00:12.04 | DocScrutinizer05 | don't know if ssh client is already suspicious to have on your linux device, but I don't see a less suspicious approach (except maybe browser embedded terminal) |
| 00:13.29 | DocScrutinizer05 | and that would create trouble from browser history, unless you take special care to enter such embedded terminal only via 'interactive content' and not via a special URL |
| 00:16.07 | DocScrutinizer05 | good: http://wstaw.org/m/2017/02/13/plasma-desktopd17764.png poor: http://myserver.com/cli |
| 00:41.22 | DocScrutinizer05 | the really nice part: http://paste.opensuse.org/97554917 http://wstaw.org/m/2017/02/13/Test.jpg FWIW |
| 00:42.26 | DocScrutinizer05 | wget http://wstaw.org/m/2017/02/13/Test.jpg -O -|grep -a -A99 begin |uudecode |
| 01:06.26 | DocScrutinizer05 | wpwrak: btw for your stegano above you want png or sth like that, for sure not jpg or any other compressed format ;-) |
| 01:06.41 | DocScrutinizer05 | bmp |
| 01:06.51 | DocScrutinizer05 | wav |
| 01:09.45 | DocScrutinizer05 | .wav is excellent for leat-significant-bit stegano, using 16bit wordsize |
| 01:09.51 | DocScrutinizer05 | least* |
| 01:20.13 | *** join/#qi-hardware jow (~jow@srv.mein.io) |
| 01:38.24 | wpwrak | yeah, jpeg is a little harder :) |
| 01:50.26 | *** join/#qi-hardware kyak (~kyak@unaffiliated/kyak) |
| 03:51.56 | *** join/#qi-hardware erichvk (~esh@ppp118-210-201-121.lns20.adl6.internode.on.net) |
| 05:27.13 | *** join/#qi-hardware DocScrutinizer05 (~saturn@openmoko/engineers/joerg) |
| 07:23.28 | *** join/#qi-hardware sb0 (~lekernel@59.152.213.90) |
| 09:17.18 | *** join/#qi-hardware fdcx (357@ceata/consiliu/FDCX) |
| 09:35.22 | *** join/#qi-hardware ecloud (quassel@nat/qt/x-wknakkibgkdpeafv) |
| 10:06.28 | *** join/#qi-hardware pcercuei (~paul@137.71.226.54) |
| 10:41.57 | *** join/#qi-hardware dandon (~dandon@88.151.75.156) |
| 13:31.02 | *** join/#qi-hardware xiangfu_ (~xiangfu@223.223.187.142) |
| 13:31.16 | *** join/#qi-hardware wolfspra1l (~wolfsprau@bobbin.q-ag.de) |
| 13:32.38 | *** join/#qi-hardware ecloud (quassel@nat/qt/x-lqbuqoswrmoaxalc) |
| 15:11.27 | *** join/#qi-hardware wej (~j@2a03:1b20:3:f011::9e) |
| 16:01.47 | *** join/#qi-hardware pcercuei (~paul@137.71.226.54) |
| 16:27.48 | *** join/#qi-hardware strawberyargon (~starcard@79-73-125-69.dynamic.dsl.as9105.com) |
| 17:01.29 | *** join/#qi-hardware sb0 (~lekernel@210006059234.ctinets.com) |
| 17:54.53 | *** join/#qi-hardware erichvk_ (~esh@ppp118-210-85-187.lns20.adl2.internode.on.net) |
| 18:45.48 | *** join/#qi-hardware pcercuei (~pcercuei@92.177.36.45) |
| 18:50.16 | *** join/#qi-hardware sandeepkr (~Sandeepkr@103.49.155.114) |
| 20:13.48 | *** join/#qi-hardware planasb (~planasb@78-61-86-243.static.zebra.lt) |
| 20:13.48 | *** join/#qi-hardware planasb (~planasb@unaffiliated/planasb) |
| 21:25.29 | *** join/#qi-hardware sandeepkr (~Sandeepkr@103.49.155.114) |
| 22:50.19 | wpwrak | btw, regarding the dangers of crossing borders: http://www.theverge.com/2017/2/12/14583124/nasa-sidd-bikkannavar-detained-cbp-phone-search-trump-travel-ban |
