Bitcoin Forum

Other => Off-topic => Topic started by: Nefario on February 25, 2011, 01:26:38 PM



Title: TrueCrypt Steganography, hide data in quicktime files
Post by: Nefario on February 25, 2011, 01:26:38 PM
http://keyj.s2000.at/?p=458
See link, thought it would be interesting.


Title: Re: TrueCrypt Steganography, hide data in quicktime files
Post by: Vasiliev on February 26, 2011, 01:15:25 AM
I do not believe this would work against a determined (and very smart) attacker. Although video files test as being completely random, I believe it is quite likely that there are patterns within them. See this comparison of overheads for containers (http://www.alexander-noe.com/video/amg/en_overhead_comparison.html). In a ~993MB MP4 file, the MP4 container is about 2.4MB. Not much, but it seems that MP4 structures would appear at predictable areas in the file. (MKV is 1.5-1.8MB, btw)

Additionally, it is easy to figure out if One Of These Things Just Doesn't Belong with a video file. Just demux the video file. (There are many, many tools to do this. FFmpeg can.) If the video/audio tracks add up to less than the actual filesize (minus approximate overhead), then there is something odd about that file. Or, obviously, if one of the tracks is of unknown type and you can't decode it.


But I am assuming a "We only have twenty four hours to disarm the bomb and the code is in this computer!!" situation. Against a less determined, or more cursory, inspection (ACTA's border searches, for example) this steganography would work great.