alt Hacker NewsMy (admittedly superficial) knowledge about blur reversibility is that an attacker may know what kind of stuff is behind the blur.
I mean knowledge like "a human face, but the potential set of humans is known to the attacker" or even worse "a text, but the font is obvious from the unblurred part of the doc".
Replies
oulipo2 • today at 11:54 AM
The parade is easy: just add a small amount of random noise (even not visible to the human eye) to the blurred picture, and suddenly the "blur inversion" fails spectacularly
➕ show 1 reply
This was also my understanding.
It's essentially like "cracking" a password when you have its hash and know the hashing algorithm. You don't have to know how to reverse the blur, you just need to know how to do it the normal way, you can then essentially brute force through all possible characters one at a time to see if it looks the same after applying the blur.
Thinking about this, adding randomness to the blurring would likely help.
Or far more simply, just mask the sensitive data with a single color which is impossible to reverse (for rasterized images, this is not a good idea for PDFs which tend to maintain the text "hidden" underneath).