[tech] Zero-width characters and tracking via pasted text
Sean Conner
sean at conman.org
Sun Mar 14 23:11:02 GMT 2021
It was thus said that the Great Stephane Bortzmeyer once stated:
> On Sun, Mar 14, 2021 at 04:12:12PM +0000,
> nervuri <nervuri at disroot.org> wrote
> a message of 34 lines which said:
>
> > This subtle form of tracking would work just as well on Gemini as it
> > does on the web.
>
> This is technically interesting but do you suggest that Gemini be
> modified in one way or the other, to limit the risks? And, if so, how?
>
> As you note in <gemini://rawtext.club/~nervuri/stega.gmi>, it can
> perfectly be done without zero-width characters. A trivial way is to
> encode the hidden information in a number of ordinary spaces at the
> end of each line.
Or by word choice, or word order, or homographs [1]. There are many ways
to do this.
-spc
[1] https://en.wikipedia.org/wiki/IDN_homograph_attack
More information about the Gemini
mailing list