Hacker News Reader

Comment by pdntspa | Hacker News Reader

Unbelievable, I can't understand how people haven't noticed that. "Wow I crop an image and it doesnt get smaller WTF???"

Man if I ran Windows 11 to think I might be the one who stumbled on this 0-day first....

View on HN

Most of the time theses images don't end up in the file system. They are going to the clipboard and then copied to a chat or imgur

But in this case it's luckily not vulnerable

Apparently Discord and probably other platforms don't remove the excess data at the end of the file. Maybe they will start doing that now. But for all the existing cropped screenshots out there, it definitely means that there is a vulnerability.

Does the system clipboard API also preserve the excess data, though?

Nope, or at least, not through any obvious paths I've ever seen, including testing just now.

Also, both discord and imgur trimmed an image I uploaded to just the image data. Slack did not, however. I certainly wouldn't want to rely on that behavior, though.

They’ve started doing this.

> Unbelievable, I can't understand how people haven't noticed that. "Wow I crop an image and it doesnt get smaller WTF???"

Most people are not super techie computer users.

Yeah, it's pathetic.

Still... you don't need MOST people. You need ONE, with a blog or a youtube account. And it took how long?

Every techie person I know who deals with windows has not dared to move to windows 11 so far, so I'm not too to surprised. I looked it up and the data matches my anecdote, only 18% of windows users are on 11, almost 70% on windows 10.

https://www.extremetech.com/computing/342819-windows-11-gain...

The Windows 10 Snip & Sketch has the same problem though.

Compression ratios vary between different tools, I wouldn’t expect an image file size to scale at all smoothly with its resolution

Yes, but that is not going to explain how a large crop eliminating 90% of the image area is not going to shrink the filesize more than a little bit

That only matters if you check the size before and after.

(As a non web-dev, maybe, )I don't think I've cared about the file size of cropped images in the past couple years. When I crop stuff it's because I want to send it to someone, not because I'm gonna archive it or anything.

Reply on news.ycombinator.com