|
ParrotyBit
Newbie
Offline
Activity: 42
Merit: 0
|
|
September 26, 2011, 02:05:04 PM |
|
QR codes are like sticking your hand into holes in the ground. Invisible QR codes are like a poorly covered-up hole in the ground with a sign next to it that says "Stick hand in hole to read about why you need to give me your money!"
|
|
|
|
Phinnaeus Gage
Legendary
Offline
Activity: 1918
Merit: 1570
Bitcoin: An Idea Worth Spending
|
|
September 26, 2011, 02:16:16 PM |
|
QR codes are like sticking your hand into holes in the ground. Invisible QR codes are like a poorly covered-up hole in the ground with a sign next to it that says "Stick hand in hole to read about why you need to give me your money!"
Exactly! That's what makes this a beautiful APP. Before, during and after watching the video, my head was spinning on how this could be used in conjunction with Bitcoin.
|
|
|
|
nefanon
Member
Offline
Activity: 112
Merit: 10
|
|
September 26, 2011, 02:49:28 PM |
|
Wow, this looks really cool. It's be even better if someone hosted an open-source service like this so the community at large could use this.
|
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 26, 2011, 04:14:19 PM |
|
Did I get this right? This "invisible QR code" is just image recognition? So at the app vendor's website there is a database of all "active" images. If I find one of these, the app translates it into a link. Why would I want that? It has nothing to do with QR-codes as it only works as long as the database is not polluted by millions of similar pictures that confuse the app thus it will *only* work as proprietary software.
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
jim618
Legendary
Offline
Activity: 1708
Merit: 1066
|
|
September 26, 2011, 04:40:40 PM |
|
This was the top google hit for 'java image steganography': http://www.dreamincode.net/forums/topic/27950-steganography/It gives example code where text is hidden directly in the image data. Normally people hide the data in the low bits of the image data though I have not looked through that code's algorithm. QR code recognition would be much more robust in noisy environments mind because of their error correction codes and position markers.
|
|
|
|
WiseOldOwl
|
|
September 26, 2011, 04:44:01 PM |
|
This was the top google hit for 'java image steganography': http://www.dreamincode.net/forums/topic/27950-steganography/It gives example code where text is hidden directly in the image data. Normally people hide the data in the low bits of the image data though I have not looked through that code's algorithm. QR code recognition would be much more robust in noisy environments mind because of their error correction codes and position markers. Wow, I love how the basic info of bits and bytes is explained here^^^ regardless of crypt/stegan stuff.
|
|
|
|
Bitcoin Swami (OP)
|
|
September 26, 2011, 07:06:08 PM |
|
You could probably make some fun bitcoin games out of the idea. People hunting for bitcoins scanning everything in sight looking for a hidden qr code.
|
|
|
|
RodeoX
Legendary
Offline
Activity: 3066
Merit: 1147
The revolution will be monetized!
|
|
September 26, 2011, 07:12:18 PM |
|
I'm confused. Is this a photo with a stego QR image hidden in it, or is it scanning a known image?
|
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
September 26, 2011, 07:22:47 PM |
|
I haven't read their spec, but when I blew their sample PDF up, it looked like it had a bunch of subtle imperfections in just one of the color planes (they were green and magenta) that could easily be what's encoding the data.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
nhodges
|
|
September 26, 2011, 08:00:05 PM |
|
I don't get it, am I correct in the assumption it only scans with their proprietary scanning app?
|
|
|
|
casascius
Mike Caldwell
VIP
Legendary
Offline
Activity: 1386
Merit: 1140
The Casascius 1oz 10BTC Silver Round (w/ Gold B)
|
|
September 26, 2011, 08:46:03 PM |
|
Yep. Their technology reminds me more of Anoto digital ink (e.g. the "Tag" reader pen for kids) than a QR code. The dots are scattered all around the page, but more so in places where there's poor detail or no real color saturation, and I'll bet they're extremely redundant so only a small percentage of them is needed.
If you look at their sample PDF of a bright red car, there are no perceptible dots in the car itself... they are more in the background, in the sand, etc.
|
Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable. I never believe them. If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins. I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion. Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice. Don't keep coins online. Use paper or hardware wallets instead.
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 26, 2011, 09:15:52 PM |
|
Ok, i must take back my last post. This is interesting indeed.
My wild guess would be that they take a "QR-like code" and apply it to the image many times. Some areas get shifted to be green and some get shifted to be magenta. They do some kind of dithering with a set of patterns that all contain 50% green-shifting and 50% magenta-shifting. The ones can be translated to black and the others to white of the regular QR-code. As each such dithering pattern is balanced you don't see the QR-code without the appropriate pattern matching.
Now as a perceptible shift of the hue would be annoying in very bright and very dark areas, this is mainly done/visible in medium bright areas. Also highly saturated areas don't allow such operations without adverse effects.
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 26, 2011, 09:41:27 PM |
|
Ok, I tried the pdf and installed the android app and it's fun: I stretched the saturation and brighness and cropped the image down to this little image: Context: And the app did still trigger. And no, it did not trigger when I pointed it to some other pictures, so I would assume the information to really be in the image.
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 26, 2011, 09:54:46 PM |
|
For the fun of it: This car is also available without the embedded information: +saturation +lightness *2 = The image with the embedded information: and yes, even at this small scale the information can be extracted, so maybe it is slightly more sophisticated than what I suggested above
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
TiagoTiago
|
|
September 26, 2011, 10:59:14 PM |
|
How long do you expect until people reverse engineer this and release a FLOSS variation of the standard?
|
(I dont always get new reply notifications, pls send a pm when you think it has happened) Wanna gimme some BTC/BCH for any or no reason? 1FmvtS66LFh6ycrXDwKRQTexGJw4UWiqDX The more you believe in Bitcoin, and the more you show you do to other people, the faster the real value will soar!
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 26, 2011, 11:32:31 PM |
|
How long do you expect until people reverse engineer this and release a FLOSS variation of the standard?
Firstly, where is there a standard? Secondly, I doubt it is hard to find out. Most likely if you ask them, they point you to the patent describing how it works. From their commercial though it is clear that all that is stored in the image is a little snippet of information - an ID maybe. The actual link behind that ID can be changed on the server at any time. This way it heavily relies on a central database with very limited information in the picture stored highly redundant. Storing a whole business card in a picture readable when offline would surely distort it much more.
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
Phinnaeus Gage
Legendary
Offline
Activity: 1918
Merit: 1570
Bitcoin: An Idea Worth Spending
|
|
September 26, 2011, 11:52:51 PM |
|
Storing a whole business card in a picture readable when offline would surely distort it much more. How about a vector image?
|
|
|
|
phelix
Legendary
Offline
Activity: 1708
Merit: 1020
|
|
September 27, 2011, 08:07:33 AM |
|
For the fun of it: [...] and yes, even at this small scale the information can be extracted, so maybe it is slightly more sophisticated than what I suggested above +1, nice work, gisz!
|
|
|
|
giszmo
Legendary
Offline
Activity: 1862
Merit: 1114
WalletScrutiny.com
|
|
September 27, 2011, 09:36:59 AM |
|
Storing a whole business card in a picture readable when offline would surely distort it much more. How about a vector image? I don't understand. The difference between vector and bitmap is only in the storage format. QR-like codes work even after printing when the storage format is "ink on paper". Sure in an SVG you can embed arbitrary information. You can add a whole book without violating the SVG standard and without distorting the image's visual representation Check it out. It's 3.9MB and for convenience I put the bible as the title but other and new tags are perfectly allowed in the standard:
|
ɃɃWalletScrutiny.com | Is your wallet secure?(Methodology) WalletScrutiny checks if wallet builds are reproducible, a precondition for code audits to be of value. | ɃɃ |
|
|
|
|