this post was submitted on 04 Jul 2023
2 points (100.0% liked)

Lemmy

12542 readers
51 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago
MODERATORS
nutomic@lemmy.ml
2
Does Lemmy detect files (Zip/Rar/et al) within images? (lemmy.world)
submitted 1 year ago by rcmaehl@lemmy.world to c/lemmy@lemmy.ml
1 comments fedilink hide all child comments
 

I've been around the Internet for a while now to see people abuse forums. Per the GitHub repo, I see that EXIF data is already stripped from images, but I'm not seeing any mention of extra data detection on Lemmy.

If I was at home I'd test this myself, but it's extremely trivial to hide data in images. This is commonly used by less technical distributors of CSAM, as well as some malware, and should be looked out for if it isn't already.

you are viewing a single comment's thread
view the rest of the comments
[–] poVoq@slrpnk.net 3 points 1 year ago* (last edited 1 year ago)

Not sure, but it is easy to configure the auto-conversion to another format like webp which will likely destroy any such hidden data.

Edit: https://git.asonix.dog/asonix/pict-rs is the image backend, so have a look what it can and can not do.