3 ms·
>> If the camera firmware is secure, you can't fake this. > that's a big if. while I agree, I think it's important to start somewhere. using Fear Uncertainty
by rektide 5y ago
>> If the camera firmware is secure, you can't fake this.
> that's a big if.
while I agree, I think it's important to start somewhere. using Fear Uncertainty & Doubt as an excuse not to try is to admit defeat forever always. this is a good enough start.
> I don't get what this part is supposed to solve.
This seemed clear to me so I'm not sure what the confusion is. The previous stated it clearly: if someone steals your image, you can prove that your created the Jpeg based off your raw. This seems like a pretty clear boon. Your disbelief seems rested upon the premise that even trying is futile:
> and there's basically no hope of some sort of TEE to keep the private key secure.
Again, I agree that there's a lot of difficulty in securing systems, in locking down keys. Generally I think that weights far more in society & civilization's favor than it's disadvantage. Even if this system proves unworkable, the idea of it seems on target, & correct. The idea that we can take a work, sign it, and create derivate works, which are signed by yet another party, seems like a generally positive mechanism that I want to see.
The agent I see missing is being able to use Certificate Transparency to sign your own (ideally rotating) key. Relying on Polaroid to sign your photos is probably only semi-ok, yeah, them & everyone else will probably have their private keys extracted from the devices in short enough time, and those keys aren't going to rotate (at least in the current world). But if I an artist can declare in a semi-public way my keys, rotate them every hour, and sign my photos with those keys, and- chiefly- have Certificate Transparency make that timestamped key attestable- then we're going somewhere.
Please let's not just accept defeat. Please let's try to imagine how technologies can work, not just how everything is worthless & we should give up. This is a noble & good specification.