@Luke: I think so, if you also use Nikhil's rewrite of the "Summary".
I'll ping him for one more lookover, but I think his other concern is already captured by the last sentence currently in the "Discussion" section. But let me ask this way: is it obvious to you, after reading this, that the attack is limited to images that an attacker owns (or pwns by stealing the owner's credentials)? If so, then I think this is ready to go.
@Luke: I think so, if you also use Nikhil's rewrite of the "Summary".
I'll ping him for one more lookover, but I think his other concern is already captured by the last sentence currently in the "Discussion" section. But let me ask this way: is it obvious to you, after reading this, that the attack is limited to images that an attacker owns (or pwns by stealing the owner's credentials)? If so, then I think this is ready to go.