Leveraging public posts and comments as covert channels

Many Internet-facing websites allow for account creation and the subsequent posting of comments from that account. If comments are crafted according to a known encoding scheme, they can covertly indicate to an observer a piece of data present in the URL of the page where the comment resides. If these comments are similar enough to the typical comments being posted, they will give no indication that a transmission of data is occurring.