On Tue, Nov 7, 2023, 1:28 PM John Clark <johnkcl...@gmail.com> wrote:

> On Tue, Nov 7, 2023 at 1:06 PM Jason Resch <jasonre...@gmail.com> wrote:
>
> >> I don't care if Joe Blow signs it or not with his private key that's
>>> on his iPhone because I have no reason to trust Mr. Blow. I want the Apple
>>> Corporation and the people who run the GPS satellites to sign a hash
>>> function of the picture and the GPS data with their private keys, and their
>>> private keys are not on anybody's phone, they're locked up somewhere in a
>>> deep underground vault, or the cyber security equivalent.
>>>
>>
>> *> But how would Apple, in your scenario, authenticate the picture was
>> really taken from the camera of an iPhone?*
>>
>
> The person claims the picture was taken by an iPhone, if he is lying about
> that then that is a very strong reason to suspect the picture is phony.
>

How does Apple (or whoever is signing the image and its metadata) know it
was taken by an iphone at a particular location?

Presumably, if the signing key is kept in some secure location, there will
have to be a remotely invocable API, which accepts from the sender, any
possible image data and any valid GPS coordinates, etc.

By what means can the signer verify that the data provided was captured
from a camera and not generated or manipulated? I see no way to solve this
problem.

Jason


Why else would he lie about it?  And even if I couldn't be sure how the
> picture was made I'd still know when and where it was made. So you couldn't
> claim to have a compromising picture of me when I was a teenager, or claim
> to have a picture of me taken in Bangkok the day before yesterday when I
> can prove that the day before yesterday I was in Las Vegas.
>
>  John K Clark    See what's on my new list at  Extropolis
> <https://groups.google.com/g/extropolis>
> ilv
>
>
>
>> --
> You received this message because you are subscribed to the Google Groups
> "Everything List" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to everything-list+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/everything-list/CAJPayv14KpZtQ_MLhoM9MYuiOZhxcdw5cMMucKLO5NOy5%3DH2Jw%40mail.gmail.com
> <https://groups.google.com/d/msgid/everything-list/CAJPayv14KpZtQ_MLhoM9MYuiOZhxcdw5cMMucKLO5NOy5%3DH2Jw%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Everything List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to everything-list+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/everything-list/CA%2BBCJUgrOGbYx_6pe52zUHCyCs9UuKQfJM9VC4Y55boQaPyLxg%40mail.gmail.com.

Reply via email to