[tech] Zero-width characters and tracking via pasted text

Sean Conner sean at conman.org
Sun Mar 14 23:11:02 GMT 2021


It was thus said that the Great Stephane Bortzmeyer once stated:
> On Sun, Mar 14, 2021 at 04:12:12PM +0000,
>  nervuri <nervuri at disroot.org> wrote 
>  a message of 34 lines which said:
> 
> > This subtle form of tracking would work just as well on Gemini as it
> > does on the web.
> 
> This is technically interesting but do you suggest that Gemini be
> modified in one way or the other, to limit the risks? And, if so, how?
> 
> As you note in <gemini://rawtext.club/~nervuri/stega.gmi>, it can
> perfectly be done without zero-width characters. A trivial way is to
> encode the hidden information in a number of ordinary spaces at the
> end of each line.

  Or by word choice, or word order, or homographs [1].  There are many ways
to do this.

  -spc

[1]	https://en.wikipedia.org/wiki/IDN_homograph_attack


More information about the Gemini mailing list