An user on Sup Forums has been claiming that there is a coordinated campaign of cyber hackers that are embedding...

An user on Sup Forums has been claiming that there is a coordinated campaign of cyber hackers that are embedding illegal images or "Deep Drive CP" into images. Can Sup Forums explain if this is indeed possible or is this guy full of shit?

Other urls found in this thread:

en.wikipedia.org/wiki/Steganography
nist.gov/oles/forensic-database-tech-digital-evidence-table
github.com/AlphaDelta/PNG-Mask
i.4cdn.org/g/1502277469645.png
track5.mixtape.moe/ejfbhp.png
warosu.org/g/thread/S31940199
twitter.com/NSFWRedditVideo

en.wikipedia.org/wiki/Steganography

Reads like schizo rambling. Yeah I buy it

same reason I'm more inclined to believe.

Frank is a certified schizo who takes already speculative information and adds his weird ass spin to it, and post it under a trip. He then uses proxies to discuss the info with himself.
He doubled down on this stuff when he got doxed. Dude is pretty unhinged.

anything can be deleted

It is actually possible

Interesting, but could screenshots of text actually produce the things he is describing in OP?

Yesterday there was a thread of some guy that posted a PNG, if you converted (or extracted, whatever the fuck) the PNG into a 10-bit BMP and then deleted the BMP header (first 138 bits IIRC) you got a vfat filesystem that contained a webm with sound.

Yes
People used to do it all the time on here to send CP
Now than 4chin is too mainstream you rarely ever see that shit around here anymore

so Sup Forums currently has no safeguards against this?

so this is Sup Forums?
these are the people who come here and shit up the board?

>deep drive
lmao

>if you edit a file you make it into something else!
There is no way to safeguard against this, and it really isn't something to be concerned about. If you edit default wallpapers enough, I'm sure you could make those into photo realistic cp too.

you can embed stuff in images, sure. You can't magically do it in a way that it will stay on the hard drive, though.
This is /x/ levels of retarded.

That's an old method for embedding files, people used to use it to share ebooks and music (and malware, you can see an example of it in the Sup Forums.hta banner). It's pretty obvious when it's being used anyway.

Let's pretend for a second that this was actually possible. Why would they do all this shit, if they can just seize your hard drive and claim there is CP on it? It's not like they would need actual evidence if they had all this power.

This, if the government wants to take you down all they have to do is take your harddisk and plant CP on it. They do it with drugs all the time.

What the fuck


Mods

Why isn't this being done nowadays?

Because it just obfuscates the data, it doesn't protect it in any way, eg. Sharing cp can still be discovered because there's a database with the hashes of /most/ images
So it only helps against people who are not that tech savvy.

T. Guessing user

Typical Sup Forums larper

The common way is easily detected. I can't remember which but Sup Forums either strips the appended file from the image or prevents you from uploading it. Other ways, as in the cat picture that was in a picture of a tree almost certainly get by and I'm willing to bet that there is at least one or two guys hiding sketchy shit in random images to then upload on places like Sup Forums to get off on the idea.

Does no one seriously remember sink posting?

>Implying we actually know anything about technology here.

>I don't know what sinks are

They were a thing on Sup Forums back in the day.

>Sharing cp can still be discovered because there's a database with the hashes of /most/ images

This is the dumbest shit I've read on /g all day.

nist.gov/oles/forensic-database-tech-digital-evidence-table

Entry number 2, stay retarded.

People used to hide shit in .rar files which were then hidden in images in a buffer zone, not splicing two images together.

Sup Forums hasn't allowed uploading images with embedded content for years.

Post sinks

Sup Forums.hta wasn't a regular image with content embedded into it, it was a custom-generated image that when interpreted correctly would run as a script. The image itself was a script that was then made into an image, rather than a script being hidden inside of the image.

Mods slep

Post sinks, go!

>sinkposting was cp
Ho Lee sheet. I came to Sup Forums back when it was still popular and always thought it was just a dumb thing they do solely as a dumb inside joke. Even after file embedding became popularized right before it was banned because they would do the same thing for cheese pizza it never occurred to me sinkposting was the same thing.

I used to get error messages when trying to post an image that false-positived an embed.

There's probably some safeguard against it

What's the ratio that triggers corrupt image format?

> anon5 redpill.jpg
Wow, those are some advanced schizo techniques.

Ok, so CP can be embedded in images. But if you delete the photo, it stays deleted right? That user said you cant delete the CP.

>Entry number 2, stay retarded.

What I meant, you fucking imbecile, was that a hash table would be pointless for detecting stegs in a medium where a bazillion new files enter every day. You clearly know nothing about the subject so just stay out of it.

>Sup Forums hasn't allowed uploading images with embedded content for years.
so is this still possible
but the whatever sinkposting was is not anymore?

Also, the other anons are right, why would they go through all the trouble and give you an image that takes "advanced tech" only available to spooks to decrypt? wouldn't that only give you plausible deniability that you actually knew what it contained? It makes much more sense to just seize your comp and plant direct evidence.

Stop browsing Sup Forums. That poster is clearly schizophrenic and being around these kind of people WILL deteriorate your mental health.

"deleting" something on most computer systems doesn't strictly speaking "delete" it, it marks the physical area of the storage as free, and thus able to be overwritten.

If you want to truly delete something, you have to remove it and then overwrite the space it used to occupy.

I don't know if the technique in that picture is possible to upload, but I suspect that it would be because I doubt it can be safeguarded against - it's a valid image with no true modification.

To my knowledge, plausible deniability would throw the entire case out of the window, but then again, I doubt "they" would be relying on a case, they would probably just blackmail you with the threat of a case.

It's not possible on Sup Forums anymore, the images are processed to remove hidden data. This was after CP was spread through .rar files embedded into images and the FBI were in contact with Moot.

You're welcome.

-NSA

>An user on Sup Forums
Stopped reading

thanks for looking after us

github.com/AlphaDelta/PNG-Mask

>d-don't click, g-guys

what is it supposed to be? please im beyond spooped. no way am i enlarging those

What was in these, I went full retard and clicked them

...

Feels good to be naive for once.

...

>it marks the physical area of the storage as free, and thus able to be overwritten.
With SSD's a trim will likely destroy that data. And yes, undeleting shit from an SSD is next to impossible. Shit gets destroyed real fucking fast.

Not sure if LARP fag, but the post is true.

This WAS a problem several years ago (I'd say 3-4+ years), but not any more.

He's full of shit, but for other than technical reasons.

Yep, still works.

...

daily reminder that anonymous5 always tells the truth, he has infiltrated the inner cabal and is part of a top secret organization that is in possession of advanced conscious artificial intelligences that fight the good fight, he knows all the locations where ultra top secret free energy devices are stored, also aliens were in contact with the pre-fall of humanity civilizations and now have observed us thousands of years after our fall
daily reminder that black budget tech is centuries ahead of what we have now, and could transform our civilization overnight

...

Somebody answer me I'm spooked

...

Impressive

mpv --demuxer=lavf --demuxer-lavf-format=ogg i.4cdn.org/g/1502277469645.png

OR

ffplay -f ogg i.4cdn.org/g/1502277469645.png

>sink and cheese pizza was cp all along
amazing

Was that the final fantasy image in the cyb/sec general?

The obscured pictures you had to decode to reveal the nude girl were jam packed of CP as well and it flew right under the mods noses.

GMask, like a wall of nostalgia

GMASK, remember that shit?

fingerbox threads as well everyone thought it was just an inside joke for oldfags

It's possible, we're all wanted targets here

Very cool. How's this put together? Is it just a PNG where the data after compression happens to look like a valid OGG?

I don't think so, that steganography method can be implanted pretty much anywhere in a file and affect the appearance in no way.

See: track5.mixtape.moe/ejfbhp.png

If it's just got an OGG in a text chunk or something, then why does the image itself need to be 5000px wide and full of noise?

You can't upload images with embedded shit anymore.

I was saying it probably isn't just data in a chunk, rather the noise is the image and there's some decoding going on, I don't know how but that's my best guess.

*the noise is the data

yeah you can you FBI nigger

oh I guess you can or not unless I modifying that image I dont have winamp installed anymore.

here is an archive link from back a few years where people where search for emended files in there pictures
warosu.org/g/thread/S31940199

What about these?

Please go back to Sup Forums and stay there

anon5 is a LARPer who claims they swap in trannies during porn anal scenes to make it more degenerate to fap to, and has threatened to send spine beetle assassins to those that question his credibility. Plus you are talking about a board which over half the people on it think posting memes got a president elected, so I wouldn't take most of what Sup Forums says without a heavy dose of salt.

>warosu.org/g/thread/S31940199
fuck I remember that thread. The only shit I found was furry porn

Did anyone find the code you search in Google images and shows thousands of CP?

The bytestream of an ogg wrapped opus file is padded with 0s so that the size corresponds to the size of the closest fitting 80 line height 64bit RGBA raster. 80 line height is used so that the width would be as wide as possible because png has additional data at every line start which causes playback corruption for a short while not to mention Sup Forums image size limits. 64bit RGBA pixel format is used for the same purpose, to store more data on a single line. This also helps to perfectly map the original file to a rectangle thus preserving original data and not have ffmpeg complain.
Outside of this, data chunks also have compression headers that can't be skipped, so playback corruption happens mid line anyways, this can't be minimized as far as I tried.

Once the ogg file is prepared, png file can be made:
ffmpeg.bat -f rawvideo -s 4915x80 -pixel_format rgba64be -framerate 1 -i input.png -compression_level 0 output.png

Width depends on your target file size. Skipping compression is crucial.
Last step is to combine all IDAT chunks into a single one to further minimize playback corruption. This can be done with optipng:
optipng -o0 output.png


The ogg header is close enough to the start of the file so libavformat that mpv uses picks it up. Alternatively you can specify offset using --demuxer-lavf-o=skip_initial_bytes=.

This imo is a good method because it requires a minimal toolset to view the original files at a slight cost of corruption. The opus contains 50 minutes of audio at only 3 megs.

Ah, so the raw pixel data is exactly the opus file, and the PNG is saved uncompressed so it's left mostly intact, similar to .bmp?

I wonder if there might be a better way to interleave the two files. If ogg/opus supports dividing the audio data into multiple chunks, then it might be possible to put the ogg equivalent of a text chunk aligned with each PNG line break, and get rid of the playback corruption that way. Or in other words, split the audio into chunks each the size of one line of the image, and make the decoder skip over the PNG headers between lines.

>Ah, so the raw pixel data is exactly the opus file, and the PNG is saved uncompressed so it's left mostly intact, similar to .bmp?
Well a bmp is completely intact except that bmp has lines start backwards or something, so the it's best to overwrite the bmp bytestream with ogg directly.

I can't comment your second point cause I'm not yet familiar with ogg or opus bytestream. png also has "deflate" compression headers even when nothing is compressed. I'm not familiar with specifics of that.

it is possible but this guy is obviously full of shit and probably mentally ill. I'm still not sure whether people unironically believe the stuff posted on Sup Forums or I'm just getting baited this hard every time

instead of dealing with png structures getting in the way, you can just extract the pixel data to get the original data back
mpv

I've read the specification for PNG so I know about the different chunks. It seems like most readers should be robust enough to just ignore chunks that they don't recognize.

that's not what OP's image is talking about

the so-called "deep drive" content infects your drive with copies of itself - that just by having the image on your system, it somehow executes code that copies the content elsewhere on your computer

>Sup Forums hasn't allowed uploading images with embedded content for years.
i know it was a good thing to crack down on pedos but i still miss all those threads with people passing around ebooks

shit i remember that thread. i think i still have the tool around somewhere too

never found anything interesting though

microsoft bitmap (.bmp) mirrors the traditional coordinate system of 0,0 being at the bottom left of the image, not the top left like how most computers draw images
this makes the pixels in .bmp files effectively reversed compared to other formats which have 0,0 at the top left

fucking amazing. how can I make these myself?

>the so-called "deep drive" content infects your drive with copies of itself
lulwut

>take each pixel in an image
change the pixel value to the closest whole number of the form (0, 10, 20, ..., 240), ignore 250+
set each pixel value to its value + 0-9 depending on which colour value you want
you now have a way to embed images with 10 colour levels into any image up to the host-images resolution

I still do, but they don't work on any of the test ones in this thread. Needs an update

Well that way you also lose any dynamic skipping for the hidden content so it's good only for files shorter in content.
Comfy music though.

Attaching your track as I converted it. Some corruption here and there.
Run with:
mpv --demuxer=lavf --demuxer-lavf-format=matroska --demuxer-lavf-o=skip_initial_bytes=70 test.png

did you not read the image?
>It's called "Deep Drive" CP because it's still in the computer(s) even if the images are deleted adn special/advanced tech/hardware/security systems are required to spot/detect it. (This type of CP is predominantly used for Blackmail & Compromising. CP Distributors have access to it)

>/po/fags makes a thread
>best thread on Sup Forums in a long time
go back to your Sup Forumsideo game threads fag

Plain retarded.

>Well that way you also lose any dynamic skipping for the hidden content so it's good only for files shorter in content.
not sure what you mean by that
also keep in mind i didn't need to put it in the alpha channel, i could use the entire image
mpv