Hacker News new | ask | show | jobs
by jerryX 1827 days ago
What virus can be implemented in that?
1 comments

The only 'virus' you could implement would be just a weird-looking image.
Imagine I use a timing attack to visually encode some information about you in an image and trick you into sending a screenshot somewhere.

Very quick take, but systems are very interconnected these days, so sandboxes tend to leak in very unintentional ways.

How do you read a timer from within the JPEG XL bitstream? I believe the decoding process is deterministic.
It's a challenge, but I'd probably look into any decoders that parallelize the decoding and see if I can abuse this.
You'd need to exploit an implementation bug, or have the user be streaming or something (so some squares appear before others as the output of your timing attack).
Just wait, its only a short while til JPEG contains the pdf spec and a javascript interpreter
Yes, that is true, but it isn't particularly related to JPEG XL specifically.