Live data from Hacker News

Apple Reference Image: A New Approach for Verified Photography

security.apple.com

241–250 of 359 posts

Re: Apple Reference Image: A New Approach for Verified Photography

#241

Earlier quoted context omitted.

> This is really clever from Apple. The journalist use case is just the PR story. This will be really useful for identity verification and insurance apps, and has the potential to shift from "you need a smartphone to be able to live normally" to "you need an iPhone to be able to live normally". You have it all wrong. Apple Reference Image is not an id system; it's primarily a way to attest that the pixels recorded by…

> Apple Reference Image is not an id system; it's primarily a way to attest that the pixels recorded by the camera sensor have not been altered in any way; the pixels, metadata and timestamp are all cryptographically signed. > There's no way to link a reference image to a person; it's also not possible to determine if a pair of images came from the same device. Some banking apps nowadays ask you to upload a photo of…

> Apple Reference Image could be (part of) a solution, by certifying that both images were taken by the same device

This is explicitly not possible, as the post you were replying to pointed out.

Re: Apple Reference Image: A New Approach for Verified Photography

#242

Earlier quoted context omitted.

> I struggle to see how cost could be a factor here. Okay. In good faith, I'll go with you: If COST is not a factor, why does the Galaxy A16 still have no OIS (Optical Image Stabilization)? Unlike this trusted-imaging service, OIS would be a feature for increased user-experience which is highly-matured and exists in Smartphones since 2013. The answer is COST: A camera-module with OIS is a more-expensive component tha…

> If COST is not a factor, why does the Galaxy A16 still have no OIS (Optical Image Stabilization)? Because it's just not that important, phones and cameras have also used digital stabilization via cropping since forever.

Those are two fundamentally different things:

1. OIS (optical stabilization) ensures that the light photons consistently hit the same pixel, removing the blur caused by camera-shake during exposure.

2. EIS (electrical stabilization) via cropping compensates camera-shake on video(!) recording by applying the same shake to the crop-canvas within the frame.

--> EIS can fix a shaky video but not a blurry photo.

Re: Apple Reference Image: A New Approach for Verified Photography

#243

This is really clever from Apple. The journalist use case is just the PR story. This will be really useful for identity verification and insurance apps, and has the potential to shift from "you need a smartphone to be able to live normally" to "you need an iPhone to be able to live normally". There are already plenty of insurances that require you to submit claims through a smartphone app that tries to essentially do…

> This is really clever from Apple. The journalist use case is just the PR story. This will be really useful for identity verification and insurance apps, and has the potential to shift from "you need a smartphone to be able to live normally" to "you need an iPhone to be able to live normally". You have it all wrong. Apple Reference Image is not an id system; it's primarily a way to attest that the pixels recorded by…

The described scheme links the image to the device's signing key

> There's no way to link a reference image to a person; it's also not possible to determine if a pair of images came from the same device.

How would they do that ? There is only one signed key of the device

Re: Apple Reference Image: A New Approach for Verified Photography

#245
post #126

Earlier quoted context omitted.

> Now the idea is that the insurance company discontinues the App and the (untrusted) customer must have an iPhone 18 Pro to make an insurance claim? In a couple of years it will be almost any iPhone instead of 18 Pro. And if it catches on, other phone vendors will provide a similar service.

So the insurance would then, instead of contracting the current service-provider for the 3rd party app, contract also with Apple and, let's say Samsung? And then stop the 3rd party app which is vendor-agnostic and works on all devices? I'd say that's unlikely. IF that's an industry this Apple-feature will disrupt, it seems it will barely have an impact on the process of insurance companies themselves, but will actual…

>So the insurance would then, instead of contracting the current service-provider for the 3rd party app, contract also with Apple and, let's say Samsung?

There would be no contract, you just upload image from your phone and they verify signature in the file

Re: Apple Reference Image: A New Approach for Verified Photography

#246
post #118

Earlier quoted context omitted.

> […] the potential to shift from "you need a smartphone to be able to live normally" to "you need an iPhone to be able to live normally". Why do you believe Android manufacturers and SOC makers like Qualcomm won’t be able to offer a similar solution?

Not the OP, but yes, other vendors will be able to support that as well. But a camera sensor that has 1. a public/private key exchanged during device-production (production-cost), 2. the capability to reboot in a cryptographic mode (R&D / component cost) and 3. a cloud-service which then processes the raw data to create a JPG (operational cost) comes at a premium. Why should this premium be applied on a 99 USD Smartp…

> comes at a premium. Why should this premium be applied on a 99 USD Smartphone?

It's entirely software. It's R&D cost, with basically none of it in hardware (you technically just need the private key store which even very cheap devices have)

Re: Apple Reference Image: A New Approach for Verified Photography

#247

This is so insanely complex and requires placing trust in the correctness of so many pieces, many of them closed-source. And uploading every verified "developed" image to Apple's servers. And giving up full control of the software and hardware you "own". All to achieve a goal of "verifying" photons, which is only a part of the real problem of verifying the truth of an event that was photographed. I hope that companie…

Because it’s impossible to implement this feature in open source and out in the open. It relies on a locked down image pipeline and hidden key.

Incorrect. There is nothing here requiring closed source. Only private keys need to be kept private for obvious reasons

Re: Apple Reference Image: A New Approach for Verified Photography

#248

Earlier quoted context omitted.

> Apple Reference Image is not an id system; it's primarily a way to attest that the pixels recorded by the camera sensor have not been altered in any way; the pixels, metadata and timestamp are all cryptographically signed. > There's no way to link a reference image to a person; it's also not possible to determine if a pair of images came from the same device. Some banking apps nowadays ask you to upload a photo of…

> Apple Reference Image could be (part of) a solution, by certifying that both images were taken by the same device This is explicitly not possible, as the post you were replying to pointed out.

[deleted]

Re: Apple Reference Image: A New Approach for Verified Photography

#249
post #3

Apple doesn't address the modified photo replay situation, where you take a picture of an already edited image. Photoshop / AI-gen an image -> display on a high-resolution monitor -> photograph the monitor with iPhone 18 Pro -> valid Apple Reference image. To get valid reference photos, you can go to the actual physical location, put the iPhone/monitor in a cardboard box to block external light, then photograph the m…

I think the timestamp attestation of the digital negative puts a real hamper on this, because it puts a bounded time window on the photo as part of the cryptographic chain of evidence.

So if you're the proud owner of "literally the only photo of a ridiculously unusual event in a highly public area" which is bounded to either a plausible 15-30 minute window or a sketchy March2026->Now window, people can do something like "hey, gee, did anyone else see that UFO over the golden gate bridge at 3pm?"

plus, you know, the confidence score from their secret neural network, which has an unknown scoring function.

Post reply on HN