‹ BackHN Continuity

Thread

Apple Reference Image: A New Approach for Verified Photography

539 points · 352 comments · imwally

  1. tristanj · · focus · HN ↗
    Apple doesn't address the modified photo replay situation, where you take a picture of an already edited image.

    Photoshop / AI-gen an image -> display on a high-resolution monitor -> photograph the monitor with iPhone 18 Pro -> valid Apple Reference image.

    To get valid reference photos, you can go to the actual physical location, put the iPhone/monitor in a cardboard box to block external light, then photograph the monitor. Paint the inside of the box using Vantablack (stopping reflections) and cover the LiDAR projector with tape.

    I can't wait to see Apple Verified™ photos of UFOs flying over the Golden Gate Bridge.

    1. nvme0n1p1 · · focus · HN ↗
      Yeah, such systems have been tried (and been hacked) for decades now.

      <a href="https:&#x2F;&#x2F;www.elcomsoft.com&#x2F;news&#x2F;428.html" rel="nofollow">https:&#x2F;&#x2F;www.elcomsoft.com&#x2F;news&#x2F;428.html

      <a href="https:&#x2F;&#x2F;blog.elcomsoft.com&#x2F;2011&#x2F;04&#x2F;nikon-image-authentication-system-compromised&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.elcomsoft.com&#x2F;2011&#x2F;04&#x2F;nikon-image-authenticatio...

      You don&#x27;t even have to travel to the location, you can just spoof GPS. And of course that will only be needed until some eastern european kid gets bored one weekend and the signing keys magically appear on pastebin.

      It&#x27;s funny to see Apple fall into this same trap.

      1. Rohansi · · focus · HN ↗
        To be fair Apple of all companies have the best shot at pulling it off. They&#x27;ve been perfecting their hardware security for years for other reasons and this is just another way to take advantage of that work. But yes, if someone breaks it then the trust is gone and it casts doubt on all of the photos that were ever captured using the broken system.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.