this post was submitted on 18 Sep 2024
152 points (94.7% liked)

Technology

58141 readers
4769 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] SchmidtGenetics -2 points 1 day ago (2 children)

I guess this would be a good reason to include some exif data when images are hosted on websites, one of the only ways to tell an image is true from my little understanding.

[–] CatsGoMOW 3 points 1 day ago (1 children)
[–] SchmidtGenetics -3 points 1 day ago* (last edited 1 day ago) (1 children)

I guess, but the original image would be somewhere to be scraped by google to compare and see an earlier version. Thats why you don’t just look at the single image, you scrape multiple sites looking for others as well.

Theres obviously very specific use cases that can take advantage of brand new images that are created on a computer, but theres still ways of detecting that with other methods as explained by the user I responded to.

[–] CatsGoMOW 0 points 1 day ago (1 children)

It seems like you’re assuming that file modified times are fixed…? Every piece of metadata like that can be altered. If you took a picture and posted it somewhere, I could take it and alter it to my liking, then add in some fake exif data as well as make it look like I modified the image before your actual original version.

You can’t use any of that metadata to prove anything.

[–] SchmidtGenetics 0 points 1 day ago* (last edited 1 day ago) (1 children)

No, but it seems like you’re assuming they would look at this sandboxed by itself…? Of course there is more than one data point to look at, when you uploaded the image would noted, so even if you uploaded an image with older exif data, so what? The original poster would still have the original image, and the original image would have scraped and documented when it was hosted. So you host the image with fake data later, and it compares the two and sees that your fake one was posted 6 months later, it gets flagged like it should. And the original owner can claim authenticity.

Metadata provides a trail and can be used with other data points to show authenticity when a bad actor appears for your image.

You are apparently assuming to be looking at a single images exif data to determine what? Obviously they would use every image that looks similar or matches identical and use exif data to find the real one. As well as other mentioned methods.

The only vector point is newly created images that haven’t been digitally signed, anything digitally signed can be verified as new, unless you go to extreme lengths to fake and image and than somehow recapture it with a digitally signed camera without it being detected fake by other methods….

[–] [email protected] 1 points 1 day ago (1 children)

No, the default should be removing everything but maybe the date because of privacy implications.

[–] SchmidtGenetics -3 points 1 day ago* (last edited 1 day ago) (1 children)

include some EXIF data

Thats what I said.

Date, device, edited. That can all be included, location doesn’t need to be.

[–] [email protected] 3 points 1 day ago (1 children)

The device is no more anyone else's business than anything else.

It should absolutely not be shared by default.

[–] SchmidtGenetics -3 points 1 day ago (1 children)

To prove the legibility of the image? It’s a great data point that’s pretty anonymous, they don’t need to include the Mac, sim, serial or other information.

[–] [email protected] 0 points 1 day ago (1 children)

A. It's not even the weakest of weak evidence of whether a photo is legitimate. It tells you literally zero.

B. Even if it was concrete proof, that would still be a truly disgusting reason to think you were entitled to that information.

[–] SchmidtGenetics -2 points 1 day ago* (last edited 1 day ago) (1 children)

You can use metadata to prove an image is real, you can’t prove something is real without it, so it’s the only current option. It tells you a lot, you just don’t want people to know it apparently, but that doesn’t change it can be used to legitimatize an image.

What’s disgusting about knowing if an image was taken on a Sony dslr, and Android or an iPhone? And entitled…? This is so you can prove your image is real? The hell you talking about here?

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago) (1 children)

No, you cannot use metadata as even extremely weak evidence that an image is real. It is less than trivial to fake, and the second anyone even hints at making it a standard approach, it will be on every photo anyone uses to mislead anyone.

Most photos on the internet are camera phones, and you absolutely are not entitled to know what phone someone has. Knowing someone's phone has infinitely more value to fingerprinting a user than including metadata could ever theoretically have to demonstrate whether a photo is legitimate or not.

Photos without a specific, on record provenance from a credible source are no longer useful for evidence of anything. You cannot go back from that.

[–] SchmidtGenetics -2 points 1 day ago* (last edited 1 day ago) (1 children)

Meta data creates a string, if you want to claim ownership of an image and I show an image with earlier metadata, who’s is the real one? Yes it can be faked, but it can also be traced. Thats not a reason to not do something, the hell? That’s like suggesting you can’t police murders because someone can fake a murder.

What is identifiable about the type of phone you have…? Anyone that sees you in public has that information lmfao, there’s far more “fingerprintable” data in the exif than the device that anyone can visually see you have….. that’s the strangest privacy angle I’ve seen and you’re talking like it’s this big huge issue? I’ve asked you to explain and you haven’t, why is this?

And without that exif data you can’t prove any of that… you realize this… yeah…?

What is your point here? That you’re concerned that you might have someone knowing your phone? You realize you can scrub that information yourself if you’re not worried about proving authenticity…? Yeah…?

[–] [email protected] 2 points 1 day ago (1 children)

You very clearly have no idea whatsoever what you're talking about. This is all complete nonsense.

Anyone can write exif data to say anything they want it to. You "showing an image with earlier metadata" is completely arbitrary and doesn't tell anyone literally anything about which one is more likely to be "real". Again, it's not "weak" or "bad" evidence. It is literally not capable of being evidence.

[–] SchmidtGenetics -2 points 1 day ago* (last edited 1 day ago) (1 children)

So you gonna address what’s identifiable about a phone… or are you just gonna ignore this and scream about the one thing we know can prove authenticity of an image? I’ve addressed the can be faked… you gonna address any of my points…?

I said I had a little knowledge, do you have a point here or you just gonna scream that exif data can be faked? I was trying to have a civil conversation about this.

If there’s an image with two different exifs data, this will flag it, problem solved, what’s your issue…? Isn’t that the point? Flag fake images…?

[–] [email protected] 1 points 1 day ago (1 children)

What device you use is one of the biggest data points advertisers and trackers use to fingerprint you across the internet. No, "I use a Google Pixel 9" does not, by itself, de-anonymize you, but it does make a big dent when combined with other information.

You keep talking about "proving the authenticity of an image" with something that does not even move you .00000001% towards an image being legitimate. It is literally zero information about that question in every possible context. It is, eventually, if you throw out every camera on the planet and use heavy cryptography, theoretically possible to eventually, in the future, provide some evidence that some future picture came from some specific camera, but it will still not be proof that what that camera processed wasn't manipulated.

[–] SchmidtGenetics -2 points 1 day ago* (last edited 1 day ago) (1 children)

….

https://arstechnica.com/information-technology/2024/09/google-seeks-authenticity-in-the-age-of-ai-with-new-content-labeling-system/

Its literally the method that’s used…

group of tech companies created the C2PA system beginning in 2019 in an attempt to combat misleading, realistic synthetic media online. As AI-generated content becomes more prevalent and realistic, experts have worried that it may be difficult for users to determine the authenticity of images they encounter. The C2PA standard creates a digital trail for content, backed by an online signing authority, that includes metadata information about where images originate and how they've been modifie

For 5 fucking years already….

Okay, what does an image metadata and advertising have to do with each other…? I’m not here for conspiracy theories, I’m here to have a discussion, which you clearly can’t do.

You claim I don’t know much… I stated as much… yet you don’t know how images are verified …? The fuck…? Go off on whatever tangent you want, but exit data is the only way to determine if a photo is legitimate… yes it can be faked… congrats for pointing that out and only that this entire time… even though I already mentioned that…

What’s your point dude? Seriously I’m blocking you if you can’t have a discussion. Proof of ownership and detecting fakes are two mutually inclusive things, they can both be used to help the others legitimacy, why are you only looking at this from one angle here? Exif is for ownership, the methods in the comment I responded to are for other things. I mentioned THIS previously as well….

[–] [email protected] 1 points 1 day ago (1 children)

You realize that your article says it's a pipe dream right? Because even Google, pushing it, has no interest in actually supporting it in its tools, and neither does anyone else?

Advertising tracking is the primary space your privacy is invaded online. The fact that what phone you use is one of the most valuable data points they have that isn't "you actively being signed in somewhere that shares it" is the evidence that telling people what phone you have to share a photo is a massive privacy issue. Because what phone you have is a lot of information.