
ISC StormCast for Thursday, March 23rd, 2023
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
00:00
Android Snipping Tool: How to Identify Affected Images
The Windows 10 Snipping Tool is not an issue here because it can't open existing files and this problem only shows up if you are reducing or cropping existing files. The PD-A's PNG dump tool always was able to identify data after the eye-end chunk which usually marks the end of a PNG image. This technique, aside from all these cropping issues, was useful because sometimes miscreants are adding data like binaries and such at the end of images just sort of to obfuscate their presence. Now given that we had this in two different Snipping Tools already, maybe there are other Snipping Tools that have similar issues.
Transcript
Play full episode