Slashdot Mirror


Slashback: Streamend, Stego, Patches

The first Slashback of 2002 brings you updates on Ogg streaming (listen in while it lasts, and send feedback if you like it!), Qwest and your privacy, holes and patches for products from the MS-AOL-Time Warner Industrial Complex, and even more steganographic images failing to appear.

Getcher hot streams while they last ... jmoffitt writes: "In his post to the Vorbis list, Ciaran announced that the Ogg Vorbis BBC streams of Radio 1 and Radio 4 that we've enjoyed since early November would go offline as the test is ending. Everyone is encouraged to send their encouragement for these streams to continue to webweaver@bbc.co.uk. Also, as a special treat, the Radio 4 Ogg stream has been extended a week - just enough for all to catch the first episode of Lord of the Rings on Saturday at 1430 GMT."

Please mind the people interrupting your privacy. Matt Clauson writes: "Discussion list for the Qwest privacy issue and possible protest action has been set up -- send an email qwest-action-subscribe@dotorg.org to subscribe to it."

Plug, plug, plug ... timekillerj writes "Well it looks like AOL jumped right in and fixed that pesky hole. We can all go back to speculating how insecure it is now. An article on Yahoo has more info, including a short debate on w00w00 disclosing before getting a response from AOL."

Backstepping by any other name ... dagoalieman writes "It appears the FBI has decided that MS's patch is sufficient. According to CNN, they announced this earlier today in a rather quiet fashion. While MS may see it as good news, I think the fact that the hole is coming back to public attention just blackens the eye a little more for them. It will be interesting to see future ramifications of the government getting involved in these issues, too..." It can't look good when your company's software is called into question by some of your largest customers.

Nope, still don't see any. Niels Provos writes: "I just updated http://www.citi.umich.edu/u/provos/stego/usenet.php to reflect the final results from our search of hidden messages in USENET images. We did not find a single hidden message.

I also released a new version of stegdetect.

The disconcert cluster that we used for the dictionary attack contained more than two-hundred workstations, mostly from CAEN (that is the computer aided engineering network at UMich). The peak performance is comparable to 72 1200 MHz Pentium III machines :-) ...

Below my mail to the cryptography mailing list.

------- Forwarded Message
From: Niels Provos <provos@citi.umich.edu>
To: cryptography@wasabisystems.com
Subject: Stegdetect 0.4 released and results from USENET search available
Date: Fri, 21 Dec 2001 12:16:14 -0500
Sender: provos@citi.umich.edu

I just released Stegdetect 0.4. It contains the following changes:

- Improved detection accuracy for JSteg and JPhide.
- JPEG Header Analysis reduces false positives.
- JPEG Header Analysis provides rudimentary detection of F5.
- Stegbreak uses the file magic utility to improve dictionary
attack against OutGuess 0.13b.

You can download the UNIX source code or windows binary from

http://www.outguess.org/download.php

- -----

The results from analyzing one million images from the Internet Archive's USENET archive are available at http://www.citi.umich.edu/u/provos/stego/usenet.php.

[...]

After scanning two million images from eBay without finding any hidden messages, we extended the scope of our analysis.

This page provides details about the analysis of one million images from the Internet Archive's USENET archive.

Processing the one million images with stegdetect results in about 20,000 suspicious images. We launched a dictionary attack on the JSteg and JPHide positive images. The dictionary has a size of 1,800,000 words and phrases. The disconcert cluster used to distribute the dictionary attack has a peak performance of roughly 87 GFLOPS. However, we have not found a single hidden message. [...]
Comments and feedback are welcome. We have an FAQ at http://www.citi.umich.edu/u/provos/stego/faq.html"
Thanks for the update, Niels!

6 of 150 comments (clear)

  1. Props to all trolls out there by Anonymous Coward · · Score: -1, Troll

    Egg Troll, WIPO Troll, The Turd Report, Klerk, and anyony I've missed!

    1. Re:Props to all trolls out there by Anonymous Coward · · Score: -1, Troll

      You forgot that beowulf cluster guy/gal.
      Man, that dude/chick is hilarious, always making me imagine beowulf clusters of the most unlikeliest items!
      What's best is, at the end of each post, he/she DAMNS us ALL TO HELL! Hot-damn that's funny.

  2. Theres a hidden message by Anonymous Coward · · Score: -1, Troll

    Find it at goatse.cx!

  3. Nigger flaming rules by Anonymous Coward · · Score: -1, Troll

    APPROVED FLAMES FOR USE BY NIGGERS

    There are only 6 known nigger flames, and you will limit yourself to
    any of these:-

    1/ Muh dick.
    2/ Us niggers only fail everywhere because of racism.
    3/ You racists are a tiny minority.
    4/ You racists are powerless losers.
    5/ I'm going to kill you muthafucka.

    These are the only flames allowed to niggers, and this selection also
    describes every flame ever attempted by any nigger, anywhere. If you
    think you have thought up the elusive "seventh nigger flame", you may
    contact the AFN WebMassa and request its inclusion. Don't worry, he
    isn't holding his breath.

    Niggers are allowed some interpretative latitude in complying with the
    above list. For example, "I beez fuckin white pussy, heh heheheh,
    white wimminz loves a nigga" is an AFN-Approved variation on Flame
    Number 1.

    Posting in illiterate ebonics is encouraged. Michael Jackson noises
    are permitted. For instance, Flame Number 1 with Michael Jackson
    noises would read:-

    hoo! hoo! Muh -- hee! hee! - Muh Dick! uh! uh! hoo! hee!

    Nigger posts should ideally be no more than 2 to 3 lines in length.

    CLAIMING TO OWN THE GROUP

    After you have posted 2 or 3 times to the group, and been humiliated,
    all niggers are required to state that they "ownz" or have "trashed"
    the group. This is mandatory. All niggers are required to do this.
    Claiming to own the group will make your white masters happy, and they
    will smile upon you warmly. Niggers doing this are required to fail
    to notice that, if they weren't here, none of us would be.

    USE OF SOCKPUPPETS

    Niggers may not hold a conversation with other niggers on AFN. If you
    wish to do this, create multiple sockpuppet IDs and use them to
    fabricate an extended conversation with yourself in which you applaud
    your own posts.

    If you are a socially unsuccessful nigger, you should stay in on a
    Saturday night and construct a lovely pretend world full of imaginary
    friends who think you're very cool and witty.

    USE OF HUMOUR

    Niggers are strictly banned from posting anything humorous, as niggers
    have no sense of humour. If you have posted something you think is
    funny, but nobody agrees with you, and if you want an "attaboy" from
    other niggers, you should congratulate yourself on your own post via a
    sockpuppet.

    Niggers should at no time post hundreds of acute and perceptive jokes
    about whites. Instead, niggers should wait until a human poster
    provides such a list, and then laboriously change the word "nigger" to
    "cracker" throughout the post before reposting it.

    Niggers should at all times conclude their posts with "LOL", "ROTFL",
    or simply "bwahahahaha" to indicate that they think they have said
    something funny.

    Some niggers think it funny to mailbomb the WebMassa by staying in on
    a Saturday night and laboriously posting 200 emails to him. The
    WebMassa thinks this is pretty funny too, given that there is such a
    thing as a "Block Sender" command, so niggers should do this
    frequently.

    WHAT TO DO WHEN YOU ARE GETTING YOUR ASS KICKED IN A THREAD

    Niggers will deal with this by claiming that they have "won". Niggers
    will also change the subject, leave the thread, or wilfully
    misunderstand the humans who are humiliating them. Optionally, you may
    alter or edit posts you are replying to, so as to enable you to retort
    more effectively. Nigger SOP is to change the post so it says
    something different.

    UNLIKELY AUTOBIOGRAPHICAL CLAIMS

    Niggers are obliged, on pain of a whipping, to invent "achievements"
    in their allegedly wonderful nigger's life. We have a way here in AFN
    of exposing nigger lies. We can tell when you're lying very easily -
    simply put, if you're speaking, you're lying. This provides the humans
    on AFN with a good belly laugh. You are therefore required to lie
    about your life and achievements.

    Approved lies include:-

    - Having a math degree
    - Not being a bus driver
    - Owning your own home
    - Having a job other than in a washroom or cafeteria
    - Not being a racist yourself
    - Being an erotic dancer (permissible because funny, though arguably a
    "muh dick" post)
    - Having ever read a book
    - Being about to go to college
    - Having ever paid for a meal without the use of food stamps
    - Never having been to jail
    - Not being a thief
    - Never having raped anyone (female or homosexually)
    - Claimed fluency in any foreign language (other than Ebonics)

    REQUIRED ASSERTIONS FROM NIGGERS

    All niggers will, on pain of a whipping:-

    Claim that niggers are taking over the planet because of
    miscegenation. You will post this claim as often as you wish, but in
    any case at least once. You will disregard the opposite examples of
    the Americas, the Middle East and Malaysia as evidence that this never
    happens. You will conveniently forget that the inferior race is always
    exterminated, or when there is no clearly inferior race (Malaysia),
    they self-segregate.

    Claim that the ancient Egyptians were niggers despite the fact that
    Egypt is a Mediterranean country whose inhabitants arrived from
    Mesopotamia. Optionally, niggers may also claim that King Arthur was a
    nigger because Africa was in Roman Empire. You may also claim that
    Bill Clinton is black because there are niggers in America (and you're
    on stronger ground with this one, given his behaviour).

    Claim that everything was invented by niggers, including the moon and
    atomic fission. AFN rules require you to deny vigorously that niggers
    only invented the spear and cannibalism. AFN rules also require
    niggers to attempt the theft of as much history as possible in order
    to refute the otherwise embarrassing matter of their never having
    achieved anything.

    Overlook the pivotal role of niggers in enforcing and profiting from
    slavery.

    At no time admit that medical science recognises the difference
    between whites, Asians, and niggers, and prescribes testing of new
    drugs on all three before they can be sold. Niggers will at all times
    maintain that, because it is possible to cross a Rottweiler with a
    Labrador, they are in all respects the same. Niggers will assume that
    all breeds of dog are indistinguishable from one another and will
    behave similarly at all times. Niggers may optionally argue that,
    because all three have four legs, a head, and a tail, and are
    approximately the same size, a wolf, cat, and sheep are the same
    animal.

  4. thats the point! by Mr+44 · · Score: 0, Troll

    encrypted data is much more random than a normal image... You can detect it because its too random...

  5. Re:Am I readintg this right by MarkLR · · Score: 0, Troll

    One e-mail during the holiday's. Its's irresponsible to release the details without giving AOL some time first to fix it. I hope this hacking group gets sued for aiding people in using this hole.