unforum

[mmdoogie]

I couldn't find the rules.ini documentation online anywhere,
but here is a copy from the distribution package I downloaded.

http://www.ardmore.net/~mmdoogie/RULES

Hope this helps.

--mrm

[Paul_G]

[TheDude]

How about using the words in the myth jpg that can't be copied and pasted. Also what are the chances they took the image from somewhere and it was stegged at that point, before they had it???

[subatomicsatan]

outguess

[Paul_G]

For those curious, after many many runs with SNOW, I can find NO traces of any SNOW stego. Looks like a dead end, so I'm leaving it alone for now.

Also, for future reference, steno using SNOW seems fairly easy to detect by eyeball, since the program does not seem to randomly disperse the whitespaces around. The program appends spaces to each line (it never prepends), starting at the first and working down. You'll know that a text file has SNOW stego because there will be a large number of whitespace characters after the first x lines (highlight all of the text [ctrl+a in windows] to make spaces visible), but no additional spaces on any line after the last one with extra spaces.

[subatomicsatan]

Re: outguess

[Paul_G]

Re: outguess

[inio]

Tried a sample on 338 images I had locally. 14 showed signs of a message (mostly 1- and 2-* jphide, one *** outguess) and 4 were skipped. That puts the false positive rate at around 2%.

[inio]

Re: outguess

[Dysfunction]

Ok I put the bee2_margaretphoto in WordPad because i was bored and I found some more words.. This is probably a trout so forgive me if it is..

I found

bodies of her subjects, while the Queen's

peeled skin from the

[TheDude]

Yeah we've already gone through all the images with notepad... steg is something different

[Roc]

mmdoogie: awesome, just what I was looking for.
Oh, and I ran through with all the above suggestions in my dictionary and I got nothing from jpseek. FYI.

Going forward, it's pretty clear we're going to have to guess the passphrase. And to do that, perhaps we need to determine who steg'd the image, and what might be inside. These might give us the clues to crack it.

The images were corrupted by The Narrator (of the Widow's Journey).
The pages were corrupted by the SPDR, and the Operator.
killer.jpg was corrupted by [Flea|Queen|Widow|Princess]
ladybee777 was rerouted by the SPDR, and emails there were being answered through killer.jpg

So what remains hidden at this point?

[Roc]

and on another line of thinking: what will it take to convince us this is a false positive?

When the medium metastasizes, and spreads to other sites (common spec), if none of those sites report steg'd images, would that be enough?

If all four of the main characters are revealed to definitively use other modes of communication, (emails, html, etc) -- would that be enough?

or will we be plugging away at this thing come hell or highwater? (or Aug 24th?)

[Paul_G]

[inio]