#acropalypse

[the-bookgremlin]

webcomic art

art from acropalypse, my Web comic

[newshabit]

Now Microsoft Has A Solution For The “aCropalypse” Vulnerability– How To Fix It.

If you use Windows 11 Snipping Tool or Windows 10 Snip & Sketch to take screenshots and edit them, you might want to update your apps as soon as possible.

Microsoft Has A Solution For The “aCropalypse” Vulnerability– How To Fix It.

[justaninfosec]

Google Pixel bug lets you “uncrop” the last four years of screenshots

New tool reveals cropped-out screenshot info isn't deleted, can be recovered.

There is a bug in the Markup screenshot editor tool on PIxel phones. The bug was introduced with Android 10 and allows recovery of portions of images that were cropped out in Markup. For example, if you took a screenshot of a webpage and cropped out a section that showed your real name, exploiting this bug could allow recovery of the cropped section.

I say "could" because it does depend on how someone got the screenshot file from you. Some sites/apps - Twitter is given as an example - recompress uploaded files and this results in the data being deleted from the file that is necessary to recovering the cropped sections. Sites/apps that share the original file - Discord is the example here - can contain the necessary information to exploit the bug.

The bug was patched in the March 2023 security update for Pixel devices, so please update your phone as soon as possible.

IMPORTANT: Patching your device addresses screenshots going forward. It does not fix all the screenshots you may have uploaded to various sites/apps over the time since Android 10 came out.

[exploitlogos]

acropalypse

acropalypse allows previously redacted details to be reclaimed, if the screenshots were taken and changes were made, using the markup editing tool found on Google Pixel devices.

[myconetted]

if you're a pixel phone user, your cropped/redacted screenshots might not be redacted

a bug called "acropalypse" has been discovered that can recover the original contents

Source: https://twitter.com/ItsSimonTime/status/1636857478263750656

More info:

This affects the built-in Markup app for all models from Pixel 3 through Pixel 7.

Images uploaded to Discord before January 2023 have not been sanitized against this.

Here's a blog post by one of the authors: https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html

What you should do:

Update your phone ASAP. Update instructions here. Follow the section for security updates and ensure your Android security update is from March 2023.

Check your social media for vulnerable images you may have uploaded. You can use the demo app to test your images: https://acropalypse.app/

[myconetted]

PSA: If you are a Pixel phone user and have posted cropped or redacted screenshots with the built-in Markup editing tool: update your shit immediately and check your social media for vulnerable screenshots

You can use the demo app here: https://acropalypse.app/ and follow the authors on twitter for more updates