Hacker News new | ask | show | jobs
by tonnydourado 1510 days ago
Problem is that there's no guarantee that twitter won't apply lossy transformations to your data (in fact, it's guaranteed that it does). So either you would have to encode the data with lots of redundancy and/or error correction, or you have to encode in like, QR code or something similar, and rely on image recognition to extract it.

Inside the range of characters support by twitter, your data is "guaranteed" to not change

1 comments

In 2018 people discovered that Twitter would recompress images but leave the embedded ICC profile, if present, intact, and used that to make a Twitter-surviving JPEG+ZIP polyglot[1], although that got patched out once someone used it as a C&C channel[2]. Apparently that still worked (and was utilized for the same purpose) on Steam user profiles in 2021[3].

[1] https://twitter.com/David3141593/status/1057042085029822464

[2] https://www.trendmicro.com/en_us/research/18/l/cybercriminal...

[3] https://twitter.com/miltinh0c/status/1392944896760238080

This technique is still fully functional: https://github.com/DavidBuchanan314/tweetable-polyglot-png