Steganography Software SecretLayer on bitsdujour.com - 65% Off

[denn]

It is something new - Data Hiding (steganography) software  SecretLayer on BTJ - 15.11.2012 http://www.bitsdujour.com/software/secretlayer/ 

Combination of the data encryption and data hiding  can be good thing. See http://www.steganographypro.com/

[Renegade]

Do you know if it is compatible with other steganography programs?

[denn]

No. No way. It is not secure, each steganography software have its own algorithm.

[Renegade]

I wasn't too sure. I don't know enough about the underlying guts of steganography. Thanks for the info.

I suppose for individual use, and not sharing, it'd be ok. For sharing though, an open source program would most likely be more appropriate. Some are listed here: http://en.wikipedia.org/wiki/Steganography_tools

[denn]

There are few main factors to take in to consideration while you select steganography software:

- Support of the jpg and png. With few nuances like small fluctuation of the file size after hiding, no "signs" or unusual symbols in the final image code) - to avoid detection.

- Strong encryption of data before hiding to the image. You can hide a True Cript container of course,  but its much more comfortably to use encryption inside of steganography software.

- Possibility to hide big files in to few images (You can't hide a lot in to one image)

[Renegade]

I can come up with so many ways to deal with problems, that the only real one is if someone else can decode the message. e.g. Take some open source program, change an image in it, then compile and upload it somewhere as an "alternative". Mission accomplished, provided that you can get the message to the intended recipient. That's another issue though, and beyond the scope of steganography.

BTW - Thanks for bringing up this topic. I know someone who needs this in life and death situations and have already sent him a quick message on the topic. You very well could have saved someone's life by creating this thread. That's not an exaggeration. Thank you.

[40hz]

@Ren - Just remind your friend not to neglect strong encryption prior to using steganography to conceal his payload. Steganography gains the lions share of its power from going unnoticed. Most of what I've heard says that detecting hidden data within an image or other filetype isn't all that difficult once you start actively checking for it. I know of private company e-mail systems that scan all attachments for the presence of hidden data. At least if his stuff was initially encrypted its secret would be preserved even after being detected as an embedded payload.

Of course once they spot you using steganography it's tantamount to an admission you're up to something.

In some places that alone is enough to "do ya in."

[Shogan Meller]

among different steganography apps (commercial and open source) this SecretLayer seems to be the most developed tool. of course it hasn't some features that other apps do, but in general there is more functionality and convenience (e.g. multiple storages, different encryptions, intuitive gui)

[barney]

Steganography in and of itself ( ) is security by obfuscation, i.e. insecure to anyone who's suspicious.  It'll fool any innocent, unsuspecting viewer (like me  ?), but 40hz's comment is right on the money.  Steganography alone is scant security.  Add some encryption, and it's a lot more secure.  It is cool, though  .

[denn]

to 40hz: You are right - the best way is to combine steganography and strong encryption. This is something what we did in SecretLayer.

Regarding detection: its not so easy. Images done with SecretLayer are not detected yet. Additionally - to reduce chances of the detection of your message - do not load it with 100% of data. Use 15-25% of capability of the container image. 

[Shogan Meller]

features we're working at:
- Mac OS version
- new storage formats
- asynchronous encryption
- bugfixes

[40hz]

Images done with SecretLayer are not detected yet.

I'll have to take your word for that. I'm not qualified to agree or disagree on that. Earlier I was merely parroting back something I had read by someone who was qualified to have an opinion on the topic.

BTW are you with the product? If so welcome! It's always good to get the developers in on the discussion.