Fingerprinting with Zero-Width Characters


43 bookmarks. First posted by bschlagel january 2018.


Hiding text inside of HTML
security  text  Crypt  html  css 
15 days ago by lost_in_space
Journalists watch out—you may be unintentionally revealing sources. In early 2016 I realized that it was possible to use zero-width characters, like zero-width non-joiner or other zero-width characters like the zero-width space to fingerprint text.
16 days ago by pitiphong_p
Invisibly fingerprinting text Journalists watch out—you may be unintentionally revealing sources. In early 2016 I realized that it was possible to use…
from instapaper
january 2018 by brew
Invisible zero width characters are totes a great idea!
january 2018 by yorksranter
RT : Fingerprinting the source of documents by inserting combinations of zero-width characters |
from twitter
january 2018 by wolever
Zero-Width Characters: Invisibly fingerprinting text
from twitter
january 2018 by fabianmoronzirfas
I also realized that it is possible to use homoglyph substitution (e.g., replacing the letter "a" with
its Cyrillic counterpart, "а"), but I dismissed this as too
easy to detect due to the differences in character rendering
across fonts and systems. However, differences in dashes (en, em,
and hyphens), quotes (straight vs curly), word spelling
(color vs colour), and the number of spaces after sentence
endings could probably go undetected due to their frequent use
in real text. After discovering these techniques I shared them with some
friends to try to help track down a cyber criminal which they
thought might be an insider threat (it wasn't, it was just a
normal blackhat hacker). The reason I'm writing
about this now is that it appears both homoglyph substitution and zero-width fingerprinting have been discovered by others,
so journalists should be informed of the existence of these techniques. Detecting synonym substitution
would require multiple documents and some custom code, but should be fairly
straightforward for an intermediately skilled data scientist or software
developer with some time.
january 2018 by sechilds
In early 2016 I realized that it was possible to use zero-width characters, like zero-width non-joiner or other zero-width characters like the zero-width space to fingerprint text. Even with just a single type of zero-width character the presence or non-presence of the non-visible character is enough bits to fingerprint even the shortest text.
hacking  privacy  security  fingerprint  journalism 
january 2018 by jchris
Fingerprinting with Zero-Width Characters
from twitter
january 2018 by gpessia
Zero-Width Characters Invisibly fingerprinting text Journalists watch out—you may be unintentionally revealing sources. In early 2016 I realized that it was…
from instapaper
january 2018 by chrispoole
Invisibly fingerprinting text with Zero-Width Characters https://t.co/D7LNbRKcPb
from instapaper
january 2018 by tonyandrewmeyer
Zero-Width Characters Invisibly fingerprinting text Journalists watch out—you may be unintentionally revealing sources. In early 2016 I realized that it was…
from instapaper
january 2018 by divigation
Important opsec advice for journalists dealing with whistleblowers and other type of leakers:
from twitter
january 2018 by hiperactivo
Zero-Width Characters Invisibly fingerprinting text Journalists watch out—you may be unintentionally revealing sources. In early 2016 I realized that it was…
from instapaper
january 2018 by toph
Invisibly fingerprinting text with Zero-Width Characters
from twitter_favs
january 2018 by randomphrase
I just liked Zero-Width Characters: Invisibly fingerprinting text on @Inoreader. http://ift.tt/2Cm640V
Tech 
january 2018 by bone187
Zero-Width Characters: Invisibly fingerprinting text ()
from twitter_favs
january 2018 by fkbarrett