this post was submitted on 27 Oct 2023
83 points (86.7% liked)
Technology
76180 readers
4265 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'm not quite sure what you're getting at. The basic idea is to be able to easily trace back wether or not a photo has been edited, as well as provide some level of proof the photo is authentic. However this is just a lock waiting to get picked to me. Hence my cat and mouse analogy.
Your initial comment said you feel like it's a band aid or spam. It's cryptography. It's not a lock waiting to be picked. It's a fantastic start.
It literally is a lock waiting to get picked. The keys have to be somewhere on the device to create the signature of the photo. This can be reverse engineered, although it may not be trivial.
Seriously, if cryptography can be reverse engineered we have a big fucking problem and photography will be the least of our issues.
It’s clear you don’t have a great understanding of how this works. You don’t have to break cryptography. You simply need to extract the cryptographic keys from the device and then reverse the algorithm it uses to create the sig of the photos.
Simply. Mate, what are you smoking?
So you're saying there's never been an instance of private keys getting leaked or extracted ever? And there's probably easier ways to break this than trying to extract the keys, especially if they're in some kind of secure chip. People can get the hardware, they can do whatever they want to it. Of course it's most likely going to be a lot harder than copying someone's SSH keys off a hard drive.
Well I appreciate your optimism. Let's hope you're right.