{"id":4913,"date":"2023-03-23T17:42:00","date_gmt":"2023-03-23T22:42:00","guid":{"rendered":"https:\/\/www.incredigeek.com\/home\/?p=4913"},"modified":"2023-03-23T13:45:40","modified_gmt":"2023-03-23T18:45:40","slug":"the-acropalypse-vulnerability","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/the-acropalypse-vulnerability\/","title":{"rendered":"The acropalypse Vulnerability"},"content":{"rendered":"\n

First what is acropalypse?<\/p>\n\n\n\n

Acropalypse is a vulnerability in Google’s markup editor (and Windows Snipping Tool). It allows an attacker to recover parts of a cropped or marked up image. <\/p>\n\n\n\n

https:\/\/en.wikipedia.org\/wiki\/ACropalypse<\/a><\/p>\n\n\n\n

There are a couple specific steps you have to follow for the bug to happen.<\/p>\n\n\n\n

    \n
  1. Take a screenshot<\/li>\n\n\n\n
  2. Save screenshot<\/li>\n\n\n\n
  3. Crop or markup screenshot in Google Markup or the Windows Snipping Tool<\/li>\n\n\n\n
  4. Save screenshot with the same name as original screenshot<\/li>\n<\/ol>\n\n\n\n

    The bug is when you save the cropped screenshot with the same name, it overwrites the original file, but the markup tools are not resizing or truncating the file. Meaning that there is extra data in the screenshot.<\/p>\n\n\n\n

    For example in the following two screenshots, notice the size and dimensions<\/p>\n\n\n\n

    Here is the first screenshot<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    The second screenshot shows smaller dimensions because it was cropped, but the size is still the same.<\/p>\n\n\n\n

    \"\"<\/a><\/figure>\n\n\n\n

    <\/p>\n\n\n\n

    Am I affected?<\/h2>\n\n\n\n

    Potentially. Most images are reprocessed if they are being uploaded to a web service. Discord only started doing that in January. So if you have images on Discord before then, you may want to look into that.<\/p>\n\n\n\n

    You also have to specifically overwrite the original screenshot image. If you don’t normally save the image first you may be fine. Never hurts to check though.<\/p>\n\n\n\n

    https:\/\/acropalypse.app\/<\/a><\/p>\n\n\n\n

    <\/p>\n\n\n\n

    Is macOS or iOS affected?<\/h2>\n\n\n\n

    macOS and so presumably iOS, appear to properly resize the image after cropping has taken place. That would lead me to suspect that iOS and macOS devices are not vulnerable to a variant of apocalypse.<\/p>\n\n\n\n

    Twitter Post about acropalypse.<\/p>\n\n\n\n

    \n

    Introducing acropalypse: a serious privacy vulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and\/or redacted screenshot. Huge thanks to @David3141593<\/a> for his help throughout! pic.twitter.com\/BXNQomnHbr<\/a><\/p>— Simon Aarons (@ItsSimonTime) March 17, 2023<\/a><\/blockquote>