Steganography is the art of hiding data within other data. Ann sends a message to Bob. With encryption Eve could see the message but not read it. With steganography Eve would not see the message.

learn more… | top users | synonyms

51
votes
5answers
59k views

Detecting Steganography in images

I recently came across an odd JPEG file: Resolution 400x600 and a filesize of 2.9 MB. I got suspicious and suspected that there is some additional information hidden. I tried some straight forward ...
41
votes
10answers
3k views

Cryptography that looks like ordinary email

I would like to stay out of the automatic filters in place by security agencies and not be accidentally placed on a no-fly list or such. Say I'm having a political debate with a friend about democracy ...
22
votes
7answers
3k views

Is there such a thing as public key steganography

One of the drawbacks of traditional steganography is that both parties need to exchange a secret key. Encryption had this problem too but circumvented this with public key cryptography. Are there ...
21
votes
4answers
3k views

Would 'spam' mail really avoid eavesdropping?

spammimic.com offers a service that 'encrypts' your mail as 'spam', the rationale being that all mail services automatically filter out spam, and so if you're wanting to communicate with someone ...
15
votes
7answers
7k views

How is it possible to embed executable code in an image

I was reading up on FireEye and came across this NYTimes article detailing a Skype chat where an image was sent that was laden with malware: Quote: To gain access to information on the ...
14
votes
8answers
5k views

Is Steganography a safe method to store secret data?

I want to put some parts of my secret data into specific file with Steganography method. Is this method as safe as other encryption methods like RSA or SHA?
14
votes
4answers
2k views

Is Steganography considered encryption and subject to USA export restrictions?

I have written an application for Apple's iOS which embeds messages in JPEG files using steganography (see http://en.wikipedia.org/wiki/Steganography). For the purposes of this question lets assume ...
12
votes
1answer
306 views

A filesystem with chunks hidden all over the internet?

I am wondering if there are any implementations of a filesystem (as in FUSE) that would allow me to host a file in chunks steganographically distributed all over the internet. The way I imagine it, ...
11
votes
5answers
11k views

Steganography to hide text within text

Are there any steganography algorithms which are capable of hiding a (optionally encrypted) text message within another innocuous text message? The scenario I envisage is that I would like to carry ...
10
votes
3answers
2k views

Can you recover original data from a screenshot that has been 'blacked out'?

Is there a threat from screenshots with blacked out info? That is can someone take out that after market addition so to speak? For instance I take a screen shot (using MS snipper) Then I ...
8
votes
6answers
4k views

How can I detect that steganography has been used?

I have seen some of the algorithms which are used to detect if a file is a stego-file or not, but all those algorithms check for specific patterns and are not universal. Maybe there are universal ...
8
votes
2answers
3k views

Best way for a hacker to hide a file on Linux?

Suppose a hacker obtains a shell on my Linux host and wants to hide a file. What's the best way for him to do this? You may assume unprivileged or root access. My thoughts are Use a .file ...
7
votes
8answers
1k views

How easy is it to find a password in a huge text file?

Say that my password is PASSWORD1 I have a 10MB jumbled text file. I hide my password in two parts in the text, between > and < so I can find it myself. Then I put the 2 parts together and add the ...
7
votes
5answers
1k views

Which graphic image formats contain revision history? Does the image editing software being used matter?

It's common knowledge among graphic designers that they can rename a PDF file and import it into Illustrator and access the "layers" within the document, revealing hidden information. I don't know ...
7
votes
2answers
2k views

Does this image contain secret data?

I am analysing big, cloud-based application. During analysis I found that one of the biggest files (>3 MB) used in this app is a very small (16x16) icon.png file. Further analysis revealed that the ...
6
votes
5answers
2k views

Is there any way to write-protect a USB or hide its contents from deletion without hardware modifications?

Data on external storage devices are not secure, I understand that. Despite hardware modifications they can still be hacked etc. However files can be hidden (steganography) or encrypted. I'm ...
6
votes
1answer
332 views

Distinguishing SSH and HTTPS traffic

Alice is an employee of Chris, and Chris does heavy traffic monitoring via its company proxy. Alice wishes to use a Bob's web service while preserving privacy and confidentiality. She has full ...
6
votes
1answer
2k views

Printer Steganography/Watermarking

I am referring to the yellow dots which are printed automatically by laser printers. They encode information such as the time the document is printed as well as the serial number. There appears to be ...
6
votes
1answer
328 views

What cryptosystem makes the encrypted text look like random noise?

Suppose one wants to setup a cryptographic protocol in which 2 parties communicate using an encryption scheme that produces encrypted messages indistinguishable from random data (the desired property) ...
6
votes
1answer
123 views

What tools are needed to view or detect covert messages in a 60 fps video?

The eye can't detect changes in a frame greater than 60 FPS. Similar to this scene in Fight Club, a QR code equivalent is used in pairing the Apple Watch with the iPhone Without knowing that the ...
6
votes
1answer
350 views

Are NTFS Alternate File Streams considered a security risk in your organisation; how is it mitigated?

Alternate File Streams allows a user to embed hidden content within any NTFS file. That file can be a TXT file, or MOV for example. Some may consider this a form of steganography, and therefore the ...
5
votes
2answers
202 views

Setup a private VPN for family in China?

I have family in China. During the past weeks their internet connection was severely limited. VPNs such as Astrill and similar weren't working anymore. Is it possible to setup my own VPN (or ...
4
votes
2answers
250 views

What happens if a pro-censor ISP has Telex key(s)?

I've been watching more and more people jump on the idea of Telex as a way to prevent internet censorship (e.g. http://www.technologyreview.com/communications/38207/ -- not my comments at the bottom ...
4
votes
2answers
162 views

How to determine if JPG EXIF data has been changed by “OEM” software (without third party tools)?

I have a JPG and I am analyzing it to determine it's efficacy. The image metadata clearly indicates that the image was digitized at 15:10:13, Dec 31, 2015 and I need to determine if this date ...
4
votes
1answer
386 views

Approaching a steganalysis challenge

I am currently doing one of the Honeynet.org challenges, specifically the 13th forensic challenge dealing with steganography. Several PNGs have been provided and participants are to find and extract ...
4
votes
3answers
522 views

Image steganography and tracking

We are running an online-press media-library. On this site many brands are uploading images and track press users download and views per image. But some brand now want to add unique code in image so ...
4
votes
2answers
142 views

How can I verifiably demonstrate that steganography or hidden partitions do not exist?

I want to verifiably demonstrate that there are no hidden partitions, or hidden messages in a given message. In this scenario, assume the subject is being monitored (consensually) and agrees to align ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
3
votes
1answer
57 views

steganography - digital application?

Recently I participated in a CTF game which held a number of steganography challenges. This got me really interested in steganography. From what I understand steganography is most commonly used with ...
3
votes
0answers
54 views

Putting hidden DRM into PNG images to track copyright infringement [duplicate]

There was a question like this, but it was about JPG pictures. I have the same one about PNG pictures. I've recently had trouble where someone stole an artwork of mine and put it as a YouTube avatar. ...
2
votes
1answer
70 views

Masking traffic in another protocol

I remember reading a couple of years ago (I believe it was during the Egyptian Revolution) that hackers managed to bypass government filters by making their traffic appear as another protocol. If ...
2
votes
0answers
239 views

Utility to hide several encrypted messages in single file [closed]

I am interested, are there existing utilities/projects under way devoted to combining encryption and steganography. I would like to - combine two or more messages, encrypted with separate ...
1
vote
3answers
10k views

How do I hide files inside an image without using any steganography tools?

I want to hide files inside a picture. The files may be music or video. Is it technically possible to do this? If so, how? I searched on Google to find methods. Please suggest some methods for ...
1
vote
2answers
89 views

VCS to manipulate returned trees to prevent leaks? [closed]

I am wondering if there is any system that would change source code trees in subtle from version control systems in ways that are hard to discover (i.e. whitespaces at the ends of lines, perhaps even ...
1
vote
2answers
510 views

Malicious self-executing code can only exist in EXIF data in JPEG images?

Let's say we got an infected JPEG image that just by viewing it can automatically execute the malicious code stored inside it. It can do this either by taking advantage of the image viewer's security ...
1
vote
1answer
329 views

Steganography using all TCP/UDP ports?

I just had an idea, and usually when I come up with one, it turns out it was already invented, so... Is there some standard that would consist of multiple parties sniffing on all of their TCP/UDP ...
1
vote
2answers
95 views

How to grade / judge / evaluate a steganography approach?

When it comes to evaluating a text steganographic approach, I think we have to consider these things: How unlikely it is for someone to guess that there is a hidden message in the message being ...
1
vote
2answers
200 views

Is there an example of a web server that does steganographic watermarking?

You could imagine a web app that serves subtly different versions of a page to each user. For example, it might encode the identity of the user in the images it serves. This would be a per-user ...
1
vote
2answers
62 views

Is steganography a part of “cryptography”?

In preparing for a security exam, the prep book I'm reading states: In the field of cryptography, the topic of encryption gets by far the most attention ... ... Other techniques such as ...
1
vote
2answers
301 views

How to look for steganography in a picture [closed]

I need to scan this picture for steganography as the meta-data suggest there is some concealment. I'm new to this process and don't know which free tool is the most comprehensive. EDIT: 1. as I ...
1
vote
2answers
233 views

How can I detect unencrypted self-executing code in JPEG images?

Assuming that I have an infected image containing a self-executing malicious code that targets my image viewer and executes when I open the file. Supposing also that my computer is completely clean ...
1
vote
1answer
436 views

Fragile digital watermarking algorithms suitable for PDF embedding

I have a PDF file that I want to embed an invisible and fragile digital watermark. What are the suitable algorithms available for this task?
1
vote
1answer
220 views

Editing images containing hidden information

Suppose we have an image with some hidden info behind it. If we open it in a photo manipulation software like Photoshop or Gimp, without editing it and just save it as a new image, does the image ...
1
vote
1answer
79 views

Steganography concept - How to check my implementation? [closed]

I have written my own software to do Steganography. Basically, I am dividing the message (text) into bits and then hide them into pixels in jpg. After that I am saving the bitmap into .png (because ...
1
vote
1answer
242 views

Efficiency of Steganography with Linear Codes

I have read some papers about steganography using perfect linear codes. The aim is sending more hidden message bits with changing less cover message bits. For example using the parity check matrix of ...
1
vote
0answers
34 views

PGP 'forced entry' decode (steganography?)

This was originally posted by me on stackoverflow but was deemed too generic. It does seem like an impossible thing to do, but: you know when you have your perimeter alarm system you usually get ...
1
vote
0answers
54 views

Rebuilding images from raw traffic [closed]

I've got a tcpflow log file that has the following: HTTP/1.1 200 OK Server: nginx Date: Sat, 20 Jun 2015 02:49:29 GMT Content-Type: image/jpeg Content-Length: 12177 Last-Modified: Wed, 10 Jun 2015 ...
1
vote
0answers
413 views

JPEG file SOS marker before SOF

I'm looking over some JPEG files with an assumption that a steganography has been used for trial obfuscation due to the installation of JPHS. I've come across a file where the start of scan marker ...
1
vote
0answers
75 views

Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]

Possible Duplicate: Detecting Steganography in images Is there a way to detect and extract hidden data from picture which altered by steganography? For example, If someone tried to spill ...
0
votes
1answer
870 views

Suggested Steganography Program?

I would like to try a Steganograghy program - know of one? How 'heavy' can it be: 1- Can I run the plaintext through a SHA-2 hash, THEN.... 2- Encrypt the digest with my private key (Digital ...