HN Hall of Fame Weekly email

Pulling JPEGs out of thin air

lcamtuf.blogspot.com Essays & writing Essays & articles Security & privacy Class of 2022-01 Hall of Fame
Screenshot of lcamtuf.blogspot.com captured 2026-07-20
Page preview · captured 2026-07-20

Resurfaced independently across 5 calendar years, with breakout response in 3 of them.

submissions
7
submitters
7
observed span
2014–2024
peak thread · 83 comments
444 pts
latest 20+ return · 2019-03-23
177 pts

Submission timeline

2007–2026

One slot for every year since HN launched. Height is that year's peak points; orange marks a 100+ point or 50+ comment breakout. Select a bar to open its strongest thread.

First comments on top threads

HN comment order

This is INSANELY COOL. If it's smart enough to learn how to build a JPEG in a day, use it with netcat and it could probably send quite a lot of things down in flames. Who needs static analysis :) ?

tux3·444-point thread·

A couple of years ago a colleague built this for H264/5: http://www.argondesign.com/products/argon-streams-hevc/ It's not just a fuzzer, it guarantees to hit every part of the spec (subject to what "profile" you're implementing). It's not free, it's a product for sale to implementers of HEVC for verification purposes.

pjc50·384-point thread·

Really cool! I recently happened to have a similar idea when I came across the rust-fuzz crate, which abstracts over afl, honggfuzz etc. If you're interested, my notes are here: https://github.com/lachenmayer/insta-fuzz I ended up "cheating" a little bit by providing a valid JPEG header - I found that rust-fuzz seemed to take far too long to generate any valid JPEG at all by starting from eg. an empty file. But maybe I just wasn't patient enough, after all I was…

The first top-level comment from each of the four biggest threads, in HN’s own order. Excerpts are shortened; open a comment for full context.

Breakout years
3

100+ points or 50+ comments

Total points
1012

reference only — not used in Hall rules or ranking

Total comments
137

reference only — not used in Hall rules or ranking

Every submission

DateTitle as submittedByPointsComments
2014-11-07Pulling JPEGs out of thin airFirst breakout · Best threadatulagarwal44483
2017-04-24Pulling JPEGs Out of Thin Airhyperpape30
2017-05-11Pulling JPEGs out of thin air (2014)shubhamjain38440
2019-03-23Pulling JPEGs out of thin air (2014)Latest 20+ point returnrayraegah17714
2022-01-28Pulling JPEGs out of thin air (2014)Hall inductionbruce34343420
2024-02-22Pulling JPEGs out of thin air (2014)Tomte10
2024-06-18Pulling JPEGs out of thin air with afl fuzzer (2014)aragonite10