Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Graphics Software Security

Digital Camera Image Verification 255

Polo writes "While reading dpreview, I noticed that among several new products, Canon has announced a Digital Image Verification Kit to prove that an image taken by a particular camera has not been modified. It's disturbing to think about the conditions that would allow digital images to be accepted in a courtroom. I guess one defense would be to figure out how to 'verify' a photo of shark attack..."
This discussion has been archived. No new comments can be posted.

Digital Camera Image Verification

Comments Filter:
  • Re:Canon (Score:1, Informative)

    by Anonymous Coward on Saturday January 31, 2004 @06:17PM (#8146329)
    Compact Flash is old and it is big and bulky. And no, Canon doesn't use it in all their cameras. For example see their new ultra-compact SD10 (It uses SecureDigital).

    But I do agree with your general sentiment about open non-proprietary flash formats.
  • by filtersweep ( 415712 ) on Saturday January 31, 2004 @06:21PM (#8146352) Homepage Journal
    "All in all I suppose it's a neat idea -- hope it actually works before somebody is on trial for his life though..."

    Well, the camera is only one step in the chain. Are they going to keep a bunch of these presumably more expensive memory cards lying around, or are "they" going to archive them on a CDR or hard drive? Once the image is out of the card, the verification is meaningless (if it wasn't already meaningless in the first place).

    I provide "expert testimony" in court on a semi-regular basis in a completely different field. I always submit "photostatic replicas" of original documents and sign a notarized affidavit of their authenticity. Overall, it is simply the sworn testimony of the authenticity of any evidence that holds more weight than some "technological solution."

    Photoshoppers be dammed! Long live fark.com
  • Re:won't work (Score:5, Informative)

    by contrasutra ( 640313 ) on Saturday January 31, 2004 @06:23PM (#8146359) Journal
    Haven't read the gnupg.org website? From the front page:

    GnuPG's ElGamal signing keys compromised (2003-11-27)
    A severe problem with ElGamal sign+encrypt keys has been found. This leads to a full compromise of the private key.


  • Still does not (Score:5, Informative)

    by www.sorehands.com ( 142825 ) on Saturday January 31, 2004 @06:30PM (#8146405) Homepage
    Even when taking a photo, to have it admitted as evidence you must have the person taking it verify that they did take it. This goes with digital or film camera -- or any type of documentary evidence.

    This is just general, but there are many rules about entering photograghs and other documents.

  • by Rosco P. Coltrane ( 209368 ) on Saturday January 31, 2004 @06:35PM (#8146431)
    I've been wrestling with the idea of writing an image modification detector

    Forget it. Only amateurs copy/paste regions and leave them like that. Those who alter images to produce really credible results may copy/paste bits of images at first, but then will blur/sharpen/solarize/burn/lighten/brush slightly part of them, drop some noise in them to match the pizelization of an original jpeg for example, merge several together and modify gradiants to make the final patch blend in just right in the bit of background you want to mask or change. The final resulting altered regions usually doesn't have much to do with the original bits you copied.
  • Re:won't work (Score:2, Informative)

    by Anonymous Coward on Saturday January 31, 2004 @06:58PM (#8146551)
    No I hadn't noticed that one. That particular bug hits extremely non-standard keys and according to the developer's announcement affected less than 0.04% of all keys on keyservers. Not only that it took a few years to detect-- which is a far cry from your time-to-crack maximum of three weeks. And the standard signing method still seems to be secure. Or at least no one who knows how to crack it is telling anyone else about it.

    None of that is to say that I think Canon's solution sounds very workable. So it embeds a hash in the image and uses that to detect if the image has been changed? So? I can do that already by hashing images as I import them. I don't understand how it prevents re-hashing, either. Besides, who cares if you can verify the digital file? It still has to be printed out at least once if it's going to be used in court. I don't know about you guys, but I know my GIMP printer drivers allow for all kinds of filters to be used on the print stream itself. Not only could I intercept and alter the data as it's being printed, but I don't see how you can verify that the printout comes from a verified file.
  • Re:Canon (Score:3, Informative)

    by ColaMan ( 37550 ) on Saturday January 31, 2004 @07:37PM (#8146759) Journal
    Thats PCMCIA / CARDBUS adaptors there,champ :-)

    He's taling about COMPACTFlash cards, which are a whopping 36.4(L) x 42.8(W) x 3.30(T) mm for the type-I's

    Any smaller physical size for your media and you tend to lose them. A lot.

    "honey, have you seen my postage-stamp sized SD card?"

    "I think one of the kids snapped it in half when they tried to feed it to the cat."

    "Oh that's ok, it was only 75 bucks (sob)"
  • by Anonymous Coward on Saturday January 31, 2004 @07:56PM (#8146846)
    This is correct. The federal rules of evidence (and the rules of most states) require that the witness testify that the photograph actually depicts what it is that the witness says it depicts. The witness could paint the photograph, if he were an adequate artist.
    All writings and papers and so forth have to be introduced in such a way as to either not be hearsay or to gain a hearsay exception.
    I don't know why you might think that a video movie is more sacrosanct than something like a blood sample. Both require someone to testify about them and in both cases the person can convict someone simply by lying.
    By the way---remember the video in the Microsoft trial? They could have easily faked that too.
    Sooner or later you have to rely upon people to tell the
    truth and there is no way around that fact. These cameras will make no difference whatsoever.
  • EXIF, distortions (Score:5, Informative)

    by wotevah ( 620758 ) on Saturday January 31, 2004 @07:59PM (#8146851) Journal

    The camera stores information about focus distance, focal length (zoom) and exposure parameters as well as other data in each image (in EXIF format, commonly). Example:

    Camera make : SANYO Electric Co.,Ltd

    Camera model : J1
    Date/Time : 2004:01:15 14:21:22
    Resolution : 2048 x 1536
    Flash used : No
    Focal length : 6.0mm
    Exposure time: 0.400 s (1/2)
    Aperture : f/2.9
    ISO equiv. : 113
    Metering Mode: center weight
    Exposure : program (auto)
    (focus distance is manufacturer-dependent and jhead couldn't get it).

    Also, you'd also have to account for the distortion effects that are measurable and reproducible with each camera model. For example, barrel or pincushion distortions compound if you take a shot of an existing picture.

  • by wotevah ( 620758 ) on Saturday January 31, 2004 @08:13PM (#8146908) Journal

    Since you said "uniform noiseless areas (sky)" - funny thing is, the sky is one of the most difficult things to get an "uniform" picture of. All digital cameras I know of produce "sky noise" in various proportions.

    A picture of the sky is how you can quickly check how noisy of an image the camera can make (part of it can be internal image processing, of course).

  • ElGamal (Score:3, Informative)

    by metalhed77 ( 250273 ) <andrewvc@gmaCOUGARil.com minus cat> on Saturday January 31, 2004 @09:22PM (#8147318) Homepage
    ElGamal was a legacy key and not really meant to be used that much. The one slashdot poster who said he was affected (when that came out) said he chose it because he liked the sound of the name. ElGamal is legacy and shouldn't really be counted against GPG
  • Re:Canon (Score:2, Informative)

    by T'Kethry ( 154212 ) on Sunday February 01, 2004 @12:21AM (#8148331) Homepage
    Canon does have 20 new digital cameras coming out this year. Of our current cameras, only 2 use the SC memory card, the SD10 and the SD100. Those cameras use that card only because some consumers want a *tiny* camera. Probably at least one of our new cameras will be SD - most of them won't.
    I work for Canon doing tech support for their cameras, oh by the way.

"The one charm of marriage is that it makes a life of deception a neccessity." - Oscar Wilde

Working...