Live data from Hacker News

FalsiScan: Make it look like a PDF has been hand signed and scanned

gitlab.com

261–270 of 399 posts

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#261
post #95

I had another version of this at the DMV. They needed to see bills that offered proof of my residence (ie power/water/etc). Turns out they wanted them to be mailed to you, which wasn't going to work because I do paperless billing for everything. So I printed them out and tri-folded them as if it had been in an envelope. People in front of me in line got turned away for using printed bills, but mine worked just fine.

It's so insane that this is the state of things. For some documents I have to sign they have to be printed out and signed with ink, and then scanned and not taken a picture of.

Why?

This is obviously way less safe than using digital signatures, which are bound to me by SSO. Anyone could sign any document with a fake signature that looks just like mine, it would be very hard for them to do a digital signature associated with my account.

I get so much paper mail it's insane. Paper mail that I'm supposed to respond to with more paper mail.

Fuck that.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#262
post #9

Nice tool! Though personally I just use something like Xournal++ to edit the PDF (add text, add a signature image, etc.) and then use the following command to "fake scan it": convert -density 150 input.pdf -colorspace gray -blur 0x0.1 -sharpen 0x5.0 -level 10%,90% -rotate -0.5 -sharpen 0x1.2 output-scanned.pdf

I don't even bother with making it look like scanned. Just adding a png signature with Xournal and that's it. Mostly government requests it so they never cared enough to complain.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#263
post #32

I really hate dealing with my printer (or any printer for that matter), so I make pretty liberal use of my drawing tablet at this point. I import the PDF into Krita, use the ballpoint pen brush, and sign. I export to PNG, then use an imagemagick script to rotate it some random number between 1-3 degrees, and add noise onto it to look like a scan. It's a pain, but it's still less annoying than dealing with a printer.

Years ago I user a good blue Ball pen and signed in a blank paper. I scanned this in high resolution, cropped, fattened the lines, removed background and saved it as a transparent PNG. I added this PNG as a stamp to my favourite PDF software and have signed many many documents. The thing to remember is to flatten comments after I stamped my signature onto the document.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#264
post #89
post #32

I really hate dealing with my printer (or any printer for that matter), so I make pretty liberal use of my drawing tablet at this point. I import the PDF into Krita, use the ballpoint pen brush, and sign. I export to PNG, then use an imagemagick script to rotate it some random number between 1-3 degrees, and add noise onto it to look like a scan. It's a pain, but it's still less annoying than dealing with a printer.

I have a png of my signature, and I just paste it into the pdf, and submit that. Haven't run into a complaint yet, and I don't have to print anything.

I do the same

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#265
post #95

I had another version of this at the DMV. They needed to see bills that offered proof of my residence (ie power/water/etc). Turns out they wanted them to be mailed to you, which wasn't going to work because I do paperless billing for everything. So I printed them out and tri-folded them as if it had been in an envelope. People in front of me in line got turned away for using printed bills, but mine worked just fine.

It's so insane that this is the state of things. For some documents I have to sign they have to be printed out and signed with ink , and then scanned and not taken a picture of. Why? This is obviously way less safe than using digital signatures, which are bound to me by SSO. Anyone could sign any document with a fake signature that looks just like mine, it would be very hard for them to do a digital signature associa…

It's intellectual laziness. Bureaucrats presume that paper, feeling more "solid" than a digital copy of something, is somehow more secure.

I've run across this many times when people use the word "best practices". The most safe thing is often breaking convention, so "best practices" becomes the unsafe thing everyone has done for years, even when it's _not_ industry standard or a good idea.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#266
post #253
post #182

Earlier quoted context omitted.

What if you're living in a van because #vanlife and you want to drive around the country nomadically for a couple years and not because you are actually financially qualified to be homeless? Like, what if you are a millionaire living in a fancy RV driving around national parks for a couple years?

Then you rent a $500/mo bedroom somewhere, sleep in it once so it's not fraud to call it your residence, and have the roommates put the utilities in your name. Now you have a residence address and utility bills in your name to your residence address, and you can get a driver's license there, just like a real boy.

Fair, but do people actually do this?

Is there a $100/mo closet I can rent for that purpose or does it have to be $500/mo bedroom? What's the smallest one can go?

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#267
post #252

Earlier quoted context omitted.

Then you get a mail forwarding service, which gives you a proper "permanent" mailing address. DDG for "rv mail forwarding" for many options.

Which doesn't fulfill the utility bill requirement.

Just get the utilities bills sent to your mailbox.

At the very least you can definitely get your bank statements sent there ...

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#268
post #266
post #253

Earlier quoted context omitted.

Then you rent a $500/mo bedroom somewhere, sleep in it once so it's not fraud to call it your residence, and have the roommates put the utilities in your name. Now you have a residence address and utility bills in your name to your residence address, and you can get a driver's license there, just like a real boy.

Fair, but do people actually do this? Is there a $100/mo closet I can rent for that purpose or does it have to be $500/mo bedroom? What's the smallest one can go?

People actually do this.

Do you really think wealthy people (who are naturally at risk of kidnapping, extortion, blackmail, threats against family, etc) have their driver's license address pointing to the place where their children sleep at night?

The DMV gives those records in bulk to third parties. It's as good as public. Additionally, every dumbfuck services vendor from a gym to a daycare to a doctor's office will demand to photocopy your ID card to provide service, and you can be damn well sure that they aren't doing a good job protecting that information. They're storing it on their malware-ridden front desk Windows computer along with everyone else's.

As far as $100/mo vs $500/mo: what's the difference? It's all under $10k/year. Who cares?

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#269
post #86

Earlier quoted context omitted.

I don't know where you are at, but I know for a fact that a scan of a signed document is binding in the EU. As far as I understand it doesn't even have to be a scanned document, you can sing a digital document by adding an image of your signature or just using your finger and a touchscreen. In the US from what I read[1] the situation is pretty much the same a scan of a signed document is binding as well as non crypto…

Huh, I'm from EU. But what I remember from lectures on digital documents, they said something different. Will have to look up this stuff.

It has been four hours, OP is nowhere to be seen. I hope they're okay amidst all the legalese.

More seriously, do let us know what you find. I've heard both sides on this but the "verbal agreement is also binding (just gl proving it)" side is usually from better sources like an actual lawyer posting on a forum as opposed to a random boss making claims about signature requirements, for example.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#270

For a project that you can use to actually sign (electronically of course) a PDF file or verify that a PDF file has a proper signature take a look a this: https://github.com/spapas/pdf-sign-check It uses org.bouncycastle and apache pdfbox and is completely open source. I'd be happy to help anybody that wants to use it in his organization! We use it sucessfully in my organization (public sector in Greece) for some yea…

Nice, but from my experience people don't know digitally signed PDF. They want paper with wet signatures or looking like wet signatures. On the other end of the scale I have seen pdfs signed with self created certificates or signed by mouse movement.
Post reply on HN