[ b / kemono / coomer ]

/kemono/ - kemono.party

Kemono Development and Discussion
Name
Email
Subject
Comment
Verification
File
Password (For file deletion.)

 No.59554

I have seen that some patreon profiles are hiding encryption keys in images, is there any way to get it?

 No.59556

depending on what progeam they use, this method is called steganography btw

the way to decode or decrypt varies, so better read the post where you get from carefully

it's not a definitive solution or might not really a true solution, but if you wanna try somehow, if the artist used a simple python program called stegano, you can learn how to use it here

https://github.com/cedricbonhomme/Stegano

again, the artist might use that or not, s o back to my first disclaimer

 No.59578

This is also a very nice way to total an unsuspecting target or site when the actual key is somewhere else. It will still be safe on Patreon's side so no risk for subscribers - unless of course you know how it works and you turn it against themselves.

Ask around about certain furry artists.

 No.59585

>>59556
Thank you very much for taking the time to answer me, but maybe I explained myself wrong. It's not that they generate encryption keys with the image, but rather in the Patreon post, they take a segment of the image link and use it as a key. I imagine it would be a different method, I think.

 No.59590

>>59585

> It's not that they generate encryption keys with the image, but rather in the Patreon post, they take a segment of the image link and use it as a key.


I'm afraid I'm still lost… are they using patreon link as… password or something? This kinda new to me and weird for several reasons (who tf think generating password based on a link from a site that the author has no ABSOLUTE control of is a good idea)

 No.59592

>>59590
Here is an example, but I have also seen animation profiles, that are using methods like this, this was the first one that came up in the search engine, the others being in Asian letters I don't know how to write to search for them: https://kemono.cr/patreon/user/140075779/post/123385978

 No.59594

>>59592
Alright thanks for the follow up, and it's very clever of the creator to put the password directly on patreon link which proven to be more secure (for now, it's easy for Kemono Admin to patch actually if they will).

This reply is kinda long, and before you waste your time in reading it, no, you can't get the password for now, unless the Admins are involved in this issue, this reply is for the Admins to consider this simple fix.

Before writing this, I've tried so many guesses before. For this test only, I used a certain Patreon post that's not locked behind a paywall.

At first, My initial thought was the password was likely from the hash of the image since the characters used closely match to MD5 hash.

 No.59595

Not from your linked artist but I used this for my convenience to compare original image hash with Kemono scrapped image hash, I was wondering, are those images… really identical?
Patreon link: https://c10.patreonusercontent.com/4/patreon-media/p/post/136295160/dfd5cc33a7e1406b9fe31a84c4c72851/eyJxIjoxMDAsIndlYnAiOjB9/1.png?token-hash=Fb3JRf9zM0owX8x7I1KKGjfhoYJesFi1hXp646shtsA%3D&token-time=1757894400
Kemono link: https://n3.kemono.cr/data/d0/6a/d06ad4e165a6efaa9de35b778f8c5a3a3836fc425c25373bba52ccd5c8aca649.png?f=castorice_k.png

After I've downloaded the images, here what I found:
- KEMONO-BOTH-OS: 98E2A8B2C5656B497330D86CB776019E
- PATREON-MOBILE: 4BE33D82C7CA44B3A1E5C955B55731E3
- PATREON-DEKSTOP: 035A7D52A22F6C6D640A3CD4C2EDAF66

The MD5 hash are different for each files… WHY THE FUCK KEMONO? Also, my assumption of this post file link (or password to some) was using MD5 hash (I thought it was the same way of Kemono using SHA-256 for file linking lol) wrong, I've browsed the internet for like 30 minutes until I found that the 32 characters used for this file link is likely to be a database key, which impossible to be reverse engineered.

Now, what can the Admins do? Maybe when scrapping the posts, the funny numbers right after the post ID should be preserved as well, this way could solve the problem that possibly could be another headache in the future if this method is widely used.

Hopefuly my report is useful and being considered~♪

 No.59596

> Before writing this, I've tried so many guesses before.

I forgot to omit this lmao.

Anyway, while writing this, I found that maybe a more straightforward message is more appropriate for the Admins to know the actual issue and what's the best suggestion for them to apply.



[Return][Go to top] [Catalog] [Post a Reply]
Delete Post [ ]
[ b / kemono / coomer ]