i hacked this photo

About this video

Chuck explains steganography — hiding secret files inside innocent-looking files — and demonstrates it with the tool Steghide, available for Mac, Windows and Linux. After installing it on Linux with apt, he embeds a small text file inside a photo using the embed command with the embedded-file and cover-file switches, protected by a passphrase; Steghide compresses and encrypts the hidden data by default, and the photo looks unchanged. Extraction reverses the process with the extract command, and the recipient also needs Steghide and the passphrase. For fun, he hides secret coordinates in a photo for his daughters, with two Apple Watches as the prize if they can decode it. He then explains the limits: the common least significant bit method stores only a tiny piece of data per pixel, so a one-megabyte file would need an eight-megabyte photo, while Steghide itself uses a graph-theory approach that is harder to detect. Finally he hides real malware — an eight-kilobyte file inside a 1.6-megabyte photo — uploads it to GitHub and downloads it on a Windows machine; the photo itself evades detection, but when the malware is extracted, Bitdefender immediately catches it and moves it to quarantine. The experiment is framed as education only, not something to try against anyone.

Key takeaways

• Steganography hides a secret file inside an ordinary cover file such as a photo or audio file, so its presence is not obvious
• Steghide embeds with the embed, -ef and -cf switches plus a passphrase, and extracts with the extract and -sf switches; the recipient needs Steghide too
• Hidden data is compressed and encrypted by default, and the cover photo looks visually unchanged after embedding
• Cover size matters: with least significant bit hiding, a one-megabyte secret would need roughly an eight-megabyte photo
• In the test, malware hidden in a photo reached the computer undetected, but Bitdefender caught and quarantined it as soon as it was extracted

Episode details: published October 21, 2022 · 10:56 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: the challenge is over. · Next: I Built a HAUNTED HOUSE with Raspberry Pi →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube