this post was submitted on 28 Mar 2024
622 points (97.1% liked)

Technology

59534 readers
3199 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Israel has deployed a mass facial recognition program in the Gaza Strip, creating a database of Palestinians without their knowledge or consent, The New York Times reports. The program, which was created after the October 7th attacks, uses technology from Google Photos as well as a custom tool built by the Tel Aviv-based company Corsight to identify people affiliated with Hamas.

you are viewing a single comment's thread
view the rest of the comments
[–] Sanctus@lemmy.world 6 points 7 months ago (2 children)

Its not that far off. We'll see exactly what I said soon enough. You can put a virus or worm inside an image in an email. You can do the same thing with a tattoo. Its unfortunate it will be here so far before the superhuman cybernetics.

[–] rottingleaf@lemmy.zip 5 points 7 months ago (1 children)

You can put a virus or worm inside an image in an email.

I'd much prefer that people who haven't done this wouldn't talk.

[–] Sanctus@lemmy.world 2 points 7 months ago (1 children)

Are you implying you can't use steganography techniques on real objects and images? You act like I stated it would be easy.

[–] rottingleaf@lemmy.zip 0 points 7 months ago* (last edited 7 months ago) (1 children)

OK, so who'll decode your "virus" from those real objects? Or it's a case of "I'm a poor Nigerian virus, please kindly run me with root privileges on a system with such and such"?

EDIT: I mean, steganography is too a word a person should know the meaning of before using.

[–] Sanctus@lemmy.world 1 points 7 months ago* (last edited 7 months ago) (1 children)

Just because you said this wouldn't work like SQL Injection, does not mean it won't. You don't know either. Have you worked on facial recognition databases? How do they store their data? Its most likely just a database. Then I would start by looking at steganography techniques to see how those can be applied. Obviously I'm not hiding an executable in there, but I don't see why you couldn't try for unsanitized input, you never know. Now if you want to continue into realism, you would just wear a full face mask outside. You also never answered my question about steganography.

[–] rottingleaf@lemmy.zip 0 points 7 months ago (1 children)

Your question doesn't make any fucking sense in the context of attacking anything, steganography is encoding your message inside redundant encoding for something else.

So, about that word.

A "virus in an image" situation is for cases when a program which will open that image has some vulnerability the attacker knows about, so the image is formed specifically to execute some shellcode in this situation.

Same with "a virus in an MP3", some MP3 decoder has a known vulnerability allowing a shellcode.

Same with PDFs and anything else.

There are more high-level situations where programs with their own complex formats (say, DOCX which is a ZIP archive with some crap inside) execute stuff.

All this is not steganography.

Steganography is when, a dumb example, you have an image and you hide your message in lower bits of pixel color values. Or something like that with an MP3 file.

Obviously I’m not hiding an executable in there, but I don’t see why you couldn’t try for unsanitized input, you never know.

Attacks are a matter of probabilities, and "you never know" doesn't suffice.

[–] Sanctus@lemmy.world 1 points 7 months ago (1 children)

So they're just storing all this facial data unencoded somewhere? Theres no way to figure that out? There is no sort of encoding/decoding going on with the facial data at all? Its impossible chief back it up the bots won? I don't think so man. People are gonna find all sorts of ways to fuck with this. Now you can join in the speculation or get expactorating all over this post. The choice is your's.

[–] rottingleaf@lemmy.zip 0 points 7 months ago

You seem to be talking to your imagination.

[–] Lath@kbin.earth 2 points 7 months ago (1 children)

Sounds like a great time to start a costume & mask making company named "The ministry of silly walks".

[–] Sanctus@lemmy.world 1 points 7 months ago

This is probably what people would actually do. Just wear a full mask.