Hacker News new | ask | show | jobs
by jonsneyers 1831 days ago
The only 'virus' you could implement would be just a weird-looking image.
1 comments
slver 1831 days ago
Imagine I use a timing attack to visually encode some information about you in an image and trick you into sending a screenshot somewhere.

Very quick take, but systems are very interconnected these days, so sandboxes tend to leak in very unintentional ways.

link
KMag 1831 days ago
How do you read a timer from within the JPEG XL bitstream? I believe the decoding process is deterministic.
link
slver 1831 days ago
It's a challenge, but I'd probably look into any decoders that parallelize the decoding and see if I can abuse this.
link
wizzwizz4 1831 days ago
You'd need to exploit an implementation bug, or have the user be streaming or something (so some squares appear before others as the output of your timing attack).
link
tsegratis 1831 days ago
Just wait, its only a short while til JPEG contains the pdf spec and a javascript interpreter
link
jonsneyers 1831 days ago
Yes, that is true, but it isn't particularly related to JPEG XL specifically.
link