you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 1 year ago* (13 children)

I think maybe an update to the image format standards, where it like somehow includes a hash of the instrument that has taken the photo and video, and thus, only such media that can be verified to have been taken by a physical instrument can be used in like legal matters, or reporting or journals.

Either this hash can be verified by some algorithm, or maybe the media could depend on this hash in such a way that the media is corrupted if it gets altered.

  • source
  • hideshow 13 child comments
  • [–] 1 point 1 year ago (2 children)

    So we should all have to throw away or phones, cameras, etc. And buy new ones that have proprietary hardware attestation?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 20 points 1 year ago

    There are already plans for metadata signing. I think some high end Canon cameras might do it already. It basically allows proof (via public private key of the hash) that a particular camera took that photo.

    The idea is that you can create a chain of custody with an image. Each edit requires a new signature, with each party responsible for verifying the previous chain, to protect their own reputation.

    It's far from perfect, but will help a lot with things like legal cases.

  • source
  • parent
  • [–] 6 points 1 year ago (1 child)

    The obvious limitation being that you can take a real photo with attestation with a real camera of a real computer screen displaying any fake shit you can imagine, then you have an officially hashed photo of anything.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 year ago (5 children)

    If the hash can be created at the time the inage/media is created then it can be faked.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 7 points 1 year ago (3 children)

    Depends on the hash - some are tracable to a crypotographic public key and thus cannot be faked. Most are not but there are options that can be. Normally we refer to such things as signed not a hash but same thing to the layman who doesn't understand this.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 1 year ago (2 children)

    In order for it to be traceable with a public key, it needs to be signed with the private key. That means the private key has to be on the camera. That means it can be extracted from the camera and leaked.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    Maybe. There are ways to assign a private key that is not easy to extract. a chip that creates a private key on first poweron and then saves to internal memory for example.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago*

    Not easy to extract sure, but is it secure enough for you to claim that it hasnt been leaked and so forms a secure chain of custody? Once one has been leaked then that can be used to sign any fake pictures you like. I woudnt buy that for anything for serious than is this meme picture real.

  • source
  • parent