Introducing the NSA-Proof Font

http://motherboard.vice.com/blog/introducing-the-nsa-proof-font

by Libertatea • 13 years ago

31 47 13 years ago

motherboard.vice.com

tazjin• 13 years ago

Not sure if I get the point of this? On digital documents it makes no difference at all and if the NSA (or whoever else) really wanted to digitalise printed documents written in this font they could surely just make some minor modifications to their OCR to support this.

Not to mention that the kind of OCR software available to secret services is probably much better than what is on the consumer market.

tbatterii• 13 years ago

I was wondering if the font was more an artistic statement rather than an actual solution.

ctidd• 13 years ago

From the article:

Sang has no illusions that even a clever cryptographic font—which you can use in email messages to shield them from snoops and font-recognition bots—will remain encoded for long. They're not meant to be long-term tools with which to combat the NSA. Rather, he views them as an awareness-raising measure.

"This project will not fully solve the problems we are facing now," he writes, " but hopefully will raise some peculiar questions."

C1D3• 13 years ago

Not only will the font not fully solve the problems everyone is facing but it will not solve anything!

mhb• 13 years ago

TFA is helpful in addressing your inquiry:

"This project will not fully solve the problems we are facing now," he writes, " but hopefully will raise some peculiar questions."

est• 13 years ago

"I decided to create a typeface that would be unreadable by text scanning software

With enough traning, any typeface is OCR-able

iso8859-15• 13 years ago

What if the kerning is non-deterministic? Identifying letters is not enough, you have to know their order too. For example, say my kerning flips every second letter. OCR alone can't solve that problem, you need AI.

sramsay• 13 years ago

I'm sorry, but I've spent about twenty years trying to deal with digital versions of texts written before 1900, and I think that's just bullshit.

This problem is still really, really fucking hard, and still really, really unsolved. If there's an existing OCR program that you can just "train" using, say, clean scans nineteenth-century newspapers, and have it have a success rate anywhere above "completely sucks," then I'd like to see it (Tesseract, certainly, is reduced to tears by such things -- in fact, Tesseract is reduced to tears by the typeface used in the Federal Reporter). I've used every OCR program ever written. None of them come remotely close to doing the job.

I agree that this is theoretically solvable, but it's a little precious to hear people say over and over how "do-able" something is when no one has actually done it.

iso8859-15• 13 years ago

Anything humans can do is theoretically solvable, isn't it?

felixr• 13 years ago

This is somewhat like changing your font to Windings in an HTML e-mail instead of using encryption.

nawitus3• 13 years ago

Actually, the rot 13 font ( http://code.eligrey.com/fonts/rot13/example.html) is a lot better for NSA-proofing :).

meowface2• 13 years ago

As silly as it sounds, rot13 probably is a better option, if you're just trying to avoid automatic detections triggered by certain words you say. Obviously it will be of no help if an analyst is directly reading things you've written though.

mistercow3• 13 years ago

I find it extremely unlikely that the NSA's software doesn't automatically try rot13.

danielharan• 13 years ago

Reminds me of this XKCD: http://xkcd.com/810/

Can we get designers to create fonts that look like hand-writing? The NSA could help us digitize a lot of our history books.

malloc2x• 13 years ago

The biggest problem faced by organizations collecting this type of data is sorting the signal from the noise.

Unfortunately, until real encryption is the norm, using this font or other means to hide your communications is like giving the NSA a free "this bit is particularly juicy, have a human read it" flag.

bmelton• 13 years ago

I'm not sure why nobody has mentioned that generally, font encodings are interpreted by the client, and can be freely disregarded, or replaced.

If the client is a massive NSA parsing engine that scrapes and indexes content, I'm going to guess it's just skipping over the font encodings.

dmix• 13 years ago

Or just create a really simple OCR substitution cipher to translate them.

lycos1• 13 years ago

Is there any technological basis for this being cryptographic? I couldn't find any, or am I missing the part where it is an artistic statement. Just knowing the language of the message is enough to use frequency analysis to crack the message.

ck22• 13 years ago

This is someone being funny right?

Because they can just load the font file into their ocr software and it will recognize it just fine?

lucb1e• 13 years ago

No need to find whatever font was used; statistical analysis of the message already does the trick.

burntsushi• 13 years ago

From the article:

    They're not meant to be long-term tools with which to combat the NSA. 
    Rather, he views them as an awareness-raising measure.

jsmcgd• 13 years ago

Perhaps it would be better if these fonts were created on a daily basis, or if people created their own independently. It could significantly add to the processing load of the OCR process.

iso8859-15• 13 years ago

Daily isn't often enough to defeat statistical analysis:

http://en.wikipedia.org/wiki/Cryptanalysis_of_the_Enigma#Rej...

ck22• 13 years ago

Or we could just all start handwriting again, lol

gus_massa• 13 years ago

which you can use in email messages to shield them from snoops and font-recognition bots

Use the source Luke: <font face="ZXX">Something Interesting</font>

It's totally unuseful for email, unless you print it, scan it and send it as an image. And even in that case they can probably train the OCR or flag it for human review.

iso8859-15• 13 years ago

What kind of data centers do the NSA use? The best circumvention should take advantage of that. For example, if they have a lot of low-end mainstream machines equipped with 4 GB RAM each, you just embed a JavaScript Scrypt-implementation in your email and encrypt the content with a configuration that would require too long to decrypt with 4 GB RAM, but not with 8 GB RAM.

lucaspiller• 13 years ago

And if they upgrade?

iso8859-15• 13 years ago

Of course it will never give you real security if the key is public. But it seems people are too lazy to exchange public keys.

anonymouz• 13 years ago

You might have some trouble convincing people to actually read your email when they need 8GB RAM and enable JavaScript just to be able to read them.

The real answer is proper encryption, not silly DIY tricks trying to be clever against one specific possible attack.

C1D3• 13 years ago

I can't give a URL but there was a link recently on the top of HN that converted emails to an image that can only be read once before its deleted which means as soon as the other end reads the email they can do it again, so if their gmail was 'prism-ed' the NSA wouldnt be able to read it.

kryten• 13 years ago

Regardless of the purpose of this or whether it's an art project or ironic or whatever, it's universally idiotic to say the least.

The message is bad, the idea is bad and it gets a lot of attention.

Eliezer• 13 years ago

My God, the public understanding of cryptography. Bruce Schneier is spinning in his grave and he's not even dead.

furyofantares• 13 years ago

It doesn't sound like the author of the font intends for anyone to actually use this to try to prevent any snooping, but instead it's just meant to be used to convey a political message.

The article however seems to want to play at least a little bit off of the idea that it has some amount of practical value, which is what all these comments are reacting to.

quinndupont• 13 years ago

As others have indicated, this is beyond useless. The NSA is not going to visually inspect your communication, rather, they'll receive the data and simply process it with a machine, that completely ignores the glyphs used (reads the ASCII/Unicode instead). This person has made a deep, fundamental mistake about computer typography, let alone cryptography. Maybe it is all a big joke though.

a3n• 13 years ago

Make an image of the message. Then they at least have to jump the hoop of deciding to OCR.

lignuist• 13 years ago

I'm counting the hours until a tesseract package appears on github, which is able to OCR this font.

mpyne• 13 years ago

Here I thought that this font was supposed to be TEMPEST-proof but I see the author is still playing in the intramural leagues...

C1D3• 13 years ago

The title and the article are both idiotic as this only works if the NSA takes screenshots of messages and deciphers them. If someone uses this font to send a message and the recipient does not have it installed they will see raw text and so will the NSA. I don't believe the creator actually believes that this can do anything but I think the author does not actually know how ASCII or fonts for that matter, work.

olgeni• 13 years ago

It might replace Comic Sans on business card, and that would still be progress.

Introducing the NSA-Proof Font

Related Stories