disLEXia 3000 blog: EXIF Thumbnail in JPEG images · disLEXia 3000 blog: EXIF Thumbnail in JPEG...

7
disLEXia 3000 blog: EXIF Thumbnail in JPEG images disLEXia 3000 blog Friday, 17. December 2004 EXIF Thumbnail in JPEG images mdornseif, 14:45h At the Aachen Summerschool applied IT security Steven J. Murdoch came up with an automatic way to analyze if the thumbnal in a JPEG file is different from the real image. There was widely discussed incident featuring a topless thumbnail and we wanted to know how widespread this problem is. So we crawled the net for images and used Steven's tools to filter for interesting ones. The tool outputs the main image (left) besides the thumbnail (right). 90% of the rest are cropped images. Sometimes just boring stuff has ben cropped, but on other instances interesting details where removed: Online for 1795 days Last update: 2007.06.23, 11:40 status You're not logged in ... login menu ... home ... topics ... galleries ... blogs.23.nu home search calendar December 2004 Sun Mon Tue Wed Thu Fri Sat 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 November January recent updates You are speaking at our... "We would prefer not to. While we understand your desire... by mdornseif (2007.03.29, 08:18) Going Crazy with Datamatrix http://blogs.23.nu/disLEXia/stories/5751/ (1 von 7)01.06.2008 16:21:40

Transcript of disLEXia 3000 blog: EXIF Thumbnail in JPEG images · disLEXia 3000 blog: EXIF Thumbnail in JPEG...

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

disLEXia 3000 blog

Friday, 17. December 2004

EXIF Thumbnail in JPEG imagesmdornseif, 14:45h

At the Aachen Summerschool applied IT security Steven J. Murdoch

came up with an automatic way to analyze if the thumbnal in a JPEG

file is different from the real image. There was widely discussed

incident featuring a topless thumbnail and we wanted to know how

widespread this problem is. So we crawled the net for images and

used Steven's tools to filter for interesting ones. The tool outputs the

main image (left) besides the thumbnail (right).

90% of the rest are cropped images. Sometimes just boring stuff

has ben cropped, but on other instances interesting details where

removed:

Online for 1795 days

Last update: 2007.06.23,

11:40

status

You're not logged in ... login

menu

... home

... topics

... galleries

... blogs.23.nu home

search

calendar

December 2004

Sun Mon Tue Wed Thu Fri Sat

1 2 3 4

5 6 7 8 9 10 11

12 13 14 15 16 17 18

19 20 21 22 23 24 25

26 27 28 29 30 31

November January

recent updates

You are speaking at our...

"We would prefer not to.

While we understand your

desire...

by mdornseif (2007.03.29,

08:18)

Going Crazy with Datamatrix

http://blogs.23.nu/disLEXia/stories/5751/ (1 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

Our (you see I have a new

job) products have an EAN-

13...

by mdornseif (2006.11.25,

22:48)

httpprint signatures

My additions to the stock

fingerprints database is...

by mdornseif (2006.02.26,

21:38)

Current best Practice...

Current best practice to

generate passwords for

mere...

by mdornseif (2006.02.24,

15:39)

I love these days

Consulting that works. A

month ago: made the

customer...

by mdornseif (2006.02.22,

22:49)

http://blogs.23.nu/disLEXia/stories/5751/ (2 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

Then there are photoshopped images where the Thumbnail reveals

the base for the modification:

http://blogs.23.nu/disLEXia/stories/5751/ (3 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

Then there are a lot of Images where the Background has been

removed:

Probably this is the most scary image: There the face has been

obscured but the thumbnail contained the original face:

http://blogs.23.nu/disLEXia/stories/5751/ (4 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

And finally there seem to be images where there are no similarities

between the main image and the thumbnail:

And with certain images the tool sees differences where no

differences are visible to the human eye:

... comment

http://blogs.23.nu/disLEXia/stories/5751/ (5 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

mdornseif, Saturday, 12. February 2005, 22:15

You can do some screening yourself at http://sauna.5711.org/~md/

thumbnails/

... link

... comment

Backlinks

37 http://en.wikipedia.org/wiki/Exif

7 http://en.wikipedia.org/wiki/Exchangeable_image_fi...

4 http://www.kriptopolis.org/eliminando-metadatos-en...

2 http://blogs.23.nu

2 http://exploit.blogosfere.it/2007/07/quando-le-imm...

2 http://seclists.org/fulldisclosure/2005/Feb/0343.h...

2 Search request: exif thumbnail

1 http://cs.wikipedia.org/wiki/Exif

1 http://elligre.tk/madelman/index.php/archivos/2005...

1 http://forum.rrjeta.net/viewtopic.php?=&p=1048

1 http://hu.wikipedia.org/wiki/Exif

1 http://seguinfo.blogspot.com/2007/08/eliminando-me...

1 http://www.derkeiler.com/Mailing-Lists/Securiteam/...

1 Search request: Differences JPEG Images EXIF Thumbnails

1 Search request: exif thumbnail

1 Search request: thumbnail from jpeg

1 Search request: exif thumbnail

1 Search request: jpeg built-in thumbnails

1 Search request: jpeg thumbnail

1 Search request: "thumbnail" jpeg exif

1 Search request: EXIF Thumbnail in JPEG images

1 Search request: exif thumbnail

1 Search request: exif thumbnail

1 Search request: thumbnail in jpeg

1 Search request: regenerate exif thumbnail

http://blogs.23.nu/disLEXia/stories/5751/ (6 von 7)01.06.2008 16:21:40

disLEXia 3000 blog: EXIF Thumbnail in JPEG images

1 Search request: exif thumbnails

1 Search request: exif thumbnail

1 Search request: update thumbnail contained in jpg

1 Search request: jpeg thumbnails tool exif

1 http://www.sterni.net/blog/permalink.asp?id=11

http://blogs.23.nu/disLEXia/stories/5751/ (7 von 7)01.06.2008 16:21:40