zlacker

[parent] [thread] 5 comments
1. JorgeG+(OP)[view] [source] 2020-04-02 23:05:32
Out of curiosity, can you share a ballpark of how many different variations can you generate per, say, paragraph of text?
replies(2): >>throwa+h1 >>oh_sig+n3
2. throwa+h1[view] [source] 2020-04-02 23:18:37
>>JorgeG+(OP)
If you choose N words to alternate with one synonym each, you can make 2^n unique versions.
replies(1): >>JorgeG+n1
◧◩
3. JorgeG+n1[view] [source] [discussion] 2020-04-02 23:19:40
>>throwa+h1
Oh, I was thinking in more subtle things such as spacing, punctuation, sizing, kerning, etc.
replies(1): >>throwa+v1
◧◩◪
4. throwa+v1[view] [source] [discussion] 2020-04-02 23:20:58
>>JorgeG+n1
Ideally you don't want to count on a screenshot being published.
replies(1): >>london+uk
5. oh_sig+n3[view] [source] 2020-04-02 23:38:45
>>JorgeG+(OP)
What I worked on was more like a spreadsheet, so I didn't use any of the text-oriented steganographic techniques like replacing words with synonyms, etc.

I was able to develop enough variations that vastly outnumbered our users though, so even with just a portion of a screenshot, you could fairly easily figure out where it came from.

Just looking at possible CSS rules and you can see where the variations come into play - cell width, border width and styles, font color(e.g. the specific green or red that represents gain/loss), kerning, column placement , etc.

On top of that, I only fudged with display elements - the numbers were never changed. However, the numbers were updated on a near-continuous basis by ingesting various logs, so any column that was live(year/month-to-date, etc) would have only a very small time range where that number could have been displayed to the user.

◧◩◪◨
6. london+uk[view] [source] [discussion] 2020-04-03 03:21:43
>>throwa+v1
For numbers like this, you can add a small amount of random variation to each number, and then save whatever variations you used to a database whenever someone views the stats.

Now when a leak happens of a specific number, you just check the logs to see who saw those exact numbers.

[go to top]