all InfoSec news
Story Beyond the Eye: Glyph Positions Break PDF Text Redaction. (arXiv:2206.02285v2 [cs.CR] UPDATED)
Aug. 16, 2022, 1:20 a.m. | Maxwell Bland, Anushya Iyer, Kirill Levchenko
cs.CR updates on arXiv.org arxiv.org
In this work we find that many current redactions of PDF text are insecure
due to non-redacted character positioning information. In particular,
subpixel-sized displacements in redacted and non-redacted characters can be
recovered and used to effectively deredact first and last names. Unfortunately
these findings affect redactions where the text underneath the black box is
removed from the PDF.
We demonstrate these findings by performing a comprehensive vulnerability
assessment of common PDF redaction types. We examine 11 popular PDF redaction
tools, …
More from arxiv.org / cs.CR updates on arXiv.org
Jobs in InfoSec / Cybersecurity
SOC 2 Manager, Audit and Certification
@ Deloitte | US and CA Multiple Locations
Information Security Engineers
@ D. E. Shaw Research | New York City
Security Officer Hospital Mission Viejo
@ Allied Universal | Mission Viejo, CA, United States
Junior Offensive Cyber Security Researcher
@ Draper | Cambridge, MA, United States
Consultant reporting reglementaire
@ Talan | Luxembourg, Luxembourg
Chief Information Security Officer
@ Kantox | Barcelona, Catalonia, Spain