we are able to make use of a hex-editor to inject javascript in the impression metadata. This operates since the browsers interpret the code once they render the picture into HTML. simply a imagined - although probably https://www.darkexploits.com/product/extremely-silent-jpg-exploit-new/