Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 11
Impact
~10k people reached

  • 0 posts edited
  • 0 helpful flags
  • 6 votes cast
Mar
5
comment The history of thumbnails (or just a previous thumbnail) is embedded in an image file?
Indeed this is the case! In images cropped on Windows Phone, thumbnails still represent an original image. You can't spot it on a fast machine, but with help of my father's old laptop I could see how Vista first showed the thumbnail from exif data, but after a moment created it's own thumbnail, saved it into thumbs.db (I guess), and from now on displayed the file using the thumbnail from thumbs.db, but the original image (in low, thumbnail resolution) is accessible to this day.
Mar
5
accepted The history of thumbnails (or just a previous thumbnail) is embedded in an image file?
Mar
5
comment The history of thumbnails (or just a previous thumbnail) is embedded in an image file?
So what happened is: 1. WP 8.1 camera saved a photo and a thumbnail was created; 2. WP 8.1. photo edit app cropped a photo and saved it, but didn't update a thumbnail; 3. Windows Vista updated the thumbnail when the image was downloaded. I'll investigate it further, as I think thumbnails were OK (updated) in Gmail and that would mean both thumbnails were saved into the image. I'll also compare image sizes cropped vs uncropped.
Mar
5
comment The history of thumbnails (or just a previous thumbnail) is embedded in an image file?
I didn't send to myself a folder with pictures, that could include thumbs.db file. I sent myself multiple pictures, which I downloaded one by one from Gmail. And yet old dimensions were retained, so maybe it's not in image file format specification (and that's why I couldn't find it) but it actually is in the file, at least when you make a photo and edit it on Windows Phone 8.1. Microsoft even confirmed it by replying to me that it's a designed feature just like in MS Office. To those who may not know, when you crop an image in MS Office, you can later still uncrop it (even after save-load).
Mar
5
asked The history of thumbnails (or just a previous thumbnail) is embedded in an image file?
Nov
26
awarded  Popular Question
Mar
2
awarded  Nice Question
Sep
24
awarded  Autobiographer
Jun
3
awarded  Notable Question
May
15
awarded  Commentator
May
15
comment OAuth2 Cross Site Request Forgery, and state parameter
When I say server I mean my server, did we fail to communicate? I thought it's clear what server I mean as I said I store the state on it.
May
15
comment OAuth2 Cross Site Request Forgery, and state parameter
If only the client has to (re)create the state, how the server knows it's right?
May
15
comment OAuth2 Cross Site Request Forgery, and state parameter
I actually use a framework, that saves the state, but I wondered if it's right, hence the question. I also have read some articles about state, and if I remember well, they all showed an implementation that saved state on server. If the state should be recreated on client and server side both, then the hashing algorithm would be known, so all a hacker would need to get is the data that is hashed.
May
15
comment OAuth2 Cross Site Request Forgery, and state parameter
I don't recreate it, I store it on the server.
May
15
comment OAuth2 Cross Site Request Forgery, and state parameter
From what I read, the state should be generated randomly. You suggest something opposite - to generate it from user data. I also don't understand why the hash should be unique - how do one enforce the uniqueness of a hash?
Oct
7
awarded  Popular Question
Oct
4
awarded  Benefactor
Oct
4
accepted OAuth2 Cross Site Request Forgery, and state parameter
Oct
2
comment OAuth2 Cross Site Request Forgery, and state parameter
Thanks. I've done such XSRF (CSRF) attacks (e.g. I sent a link to my friend that made him delete a post on his forum), and I imagine an attack where someone gives you a login URL to a site, where you login as him (victim logs in on attacker's account). It's quite easy to protect against such attack (store state in session), but aren't there more complex hacking techniques than that?
Sep
27
awarded  Promoter