C2PA Cameras Do Not Survive Contact with Reality
da.vidbuchanan.co.uk
C2PA Cameras Do Not Survive Contact with Reality
1–10 of 153 posts
Re: C2PA Cameras Do Not Survive Contact with Reality
#2I would be interested in a note on whether Sony / Leica / Olympus “content credentials” do any better with their hardware to ensure a signature is assigned to data straight off the sensor.
Re: C2PA Cameras Do Not Survive Contact with Reality
#3I would be interested in a note on whether Sony / Leica / Olympus “content credentials” do any better with their hardware to ensure a signature is assigned to data straight off the sensor.
Unfortunately they're a little outside of my tinkering budget, but if anyone wants to send me some I'll do my best to pwn them. Can't be any harder than a Google flagship, one would imagine.
I have ordered a faulty Sony A7 IV motherboard, but due to its faulty-ness and the lack of the rest of the camera, I'm not sure how far I'll be able to get with it.
Re: C2PA Cameras Do Not Survive Contact with Reality
#4I got a good laugh out of the "unblur to verify" first image. I dont know what I was expecting to see.
Re: C2PA Cameras Do Not Survive Contact with Reality
#5I would be interested in a note on whether Sony / Leica / Olympus “content credentials” do any better with their hardware to ensure a signature is assigned to data straight off the sensor.
My bet is they do considerably worse. Digital cameras are not designed with security in mind. Arbitrary code execution has been achieved on many DSLRs and there's even been open-source firmware projects for some.
Re: C2PA Cameras Do Not Survive Contact with Reality
#6I expect the only plausible chance (and it is a stretch) will be at-the-censor marking. Quantum bla bla magic pixie dust or unicorn farts something. The chance of a trustworthy (including from nation-state tampering a la Stalin et al) means of verification of digital anything is as good as dead imho.
Re: C2PA Cameras Do Not Survive Contact with Reality
#7I have a feeling Apple is going to knock it out of the park on this when they get around to it. They have a great foundation for doing image provenance well. The device attestation workflows are already there. And the same attacks that work against Android won't be as easy or effective because of Secure Enclave. Apple could run the whole signing process inside SEP.
And, Apple could choose to integrate a LiDAR depth map into the signed photo as a mitigation against the analog attacks (eg. pictures of screens).
Re: C2PA Cameras Do Not Survive Contact with Reality
#8I'm very surprised Google put in so much effort to implement an approach that is basically the equivalent of client-side verification of passwords. Did no one designing it mention that it could be defeated by any rooted device?
Re: C2PA Cameras Do Not Survive Contact with Reality
#9I have a feeling Apple is going to knock it out of the park on this when they get around to it. They have a great foundation for doing image provenance well. The device attestation workflows are already there. And the same attacks that work against Android won't be as easy or effective because of Secure Enclave. Apple could run the whole signing process inside SEP. And, Apple could choose to integrate a LiDAR depth m…
[deleted]
Re: C2PA Cameras Do Not Survive Contact with Reality
#10I'm very surprised Google put in so much effort to implement an approach that is basically the equivalent of client-side verification of passwords. Did no one designing it mention that it could be defeated by any rooted device?
Not any rooted device, it must be rooted via an exploit. Still pretty bad, though