Apple’s Verified Photography System
Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone. Other industry solutions require a photographer or institution to vouch for an image using their own credentials. We are concerned this puts some…
Apple has introduced a new system called "Reference Image" that allows for the verification of images taken by iPhones. This system does not link the photos to a specific device or photographer, addressing concerns about anonymity for photographers in conflict zones. The "Reference Image" is signed by Apple's signing service, validated by a privacy-centric credential (PCC), ensuring the authenticity of the image.
The implementation protects the privacy of the image itself, preventing Apple or others from accessing the actual pixel data. The system maintains a private record of photo identifiers and associated sensors, without exposing image data or allowing public access to this record. Revocation checks occur on-device, ensuring that devices do not reveal which photos are still valid.
Written by urgent.news from Schneier on Security's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
