2024-10-08 22:58 UTC
Security researchers: am I overly cynical, or are all the "content authenticity" initiatives meant to prove a photo is real a giant waste of time?
If the photo is cryptographically signed by the camera, the private key will just get pulled from the device.
Even if the photos are signed, you can just strip the metadata. Users will default to trust.
Even if the photo maintains a chain of trust, you can just fake a photo by taking a photo of a screen.
What am I missing?
Replies (3)
-
@samvarma@fosstodon.org 2024-10-08 23:14
@sandofsky@mastodon.social We've always ultimately been in a trust environment, and the powerful have always manipulated what they could
-
@tantramar@mastodon.social 2024-10-08 23:20
@sandofsky@mastodon.social the best way to fake a photo will always be to edit its caption. this is not a problem that can be solved with tech.
-
@simonharper@mastodon.social 2024-10-09 09:38
@sandofsky@mastodon.social Hi Ben, have you heard of the The Coalition for Content Provenance and Authenticity (C2PA)? We are members along with Adobe, Amazon, BBC, OpenAi etc. Might be worth a read and is a great initiative. https://c2pa.org