A Photography forum. PhotoBanter.com

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PhotoBanter.com forum » Digital Photography » Digital SLR Cameras
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Forensics v. Photoshop



 
 
Thread Tools Display Modes
  #1  
Old September 20th 12, 09:49 PM posted to rec.photo.digital.slr-systems,alt.photography,rec.photo.digital
Alan Browne
external usenet poster
 
Posts: 12,640
Default Forensics v. Photoshop

On 2012.09.20 04:26 , Martin Brown wrote:

There are a handful of independent JPEG implementations - most follow
the original spec closely enough that there is little or no distinction
between them (apart from in PSPro 8 which contained gross errors). It
has to be like that or you would see much worse artefacts if some JPEG
encoders made significant mistakes (as in fact happened with PsP 8).


These folks seem to have statistical evidence to the contrary which
trumps your knee jerk assumptions.

It will be judged in the marketplace of those who are concerned with
such. If there is value it will be quickly found. Or not.

The only real variation is the exact choice of quantisation table and
Photoshop is distinctive there, but most of the rest use a scaled
version of the canonical JPEG standard Qtables from the original spec.


Assumption.


Not really. Tools to do this have been around more or less since the
JPEGLIB codec was completed. CJPEG can compress an image with any
arbitrary quantisation if you ask it nicely. Splicing in the fake Exif
data for a given camera signature is a pretty trivial binary edit.


It probably is - but that's not what this sw is detecting. Above.


That is all that they have claimed. I have already pointed a link at
freeware that does exactly the same job (and much the same way).

The file signature is pretty much determined by the miscellaneous dross
that each vendor adds to the header for the JPEG stream and how many
implementation ambiguities/mistakes they make in their encoding of Exif
data. Luckily most decoders can cope with quite badly malformed Exif so
there is scope for recognising certain brands there.


Again, as if you didn't read the article or see the video, the signature
aspect has to do with the content, not the additional data.
--
"C'mon boys, you're not laying pipe!".
-John Keating.
  #2  
Old September 20th 12, 10:07 PM posted to rec.photo.digital.slr-systems,alt.photography,rec.photo.digital
Martin Brown
external usenet poster
 
Posts: 821
Default Forensics v. Photoshop

On 20/09/2012 21:49, Alan Browne wrote:
On 2012.09.20 04:26 , Martin Brown wrote:

There are a handful of independent JPEG implementations - most follow
the original spec closely enough that there is little or no distinction
between them (apart from in PSPro 8 which contained gross errors). It
has to be like that or you would see much worse artefacts if some JPEG
encoders made significant mistakes (as in fact happened with PsP 8).


These folks seem to have statistical evidence to the contrary which
trumps your knee jerk assumptions.

It will be judged in the marketplace of those who are concerned with
such. If there is value it will be quickly found. Or not.


I agree. Snake oil will be fairly quickly smoked out.

The only real variation is the exact choice of quantisation table and
Photoshop is distinctive there, but most of the rest use a scaled
version of the canonical JPEG standard Qtables from the original spec.


Assumption.


Not an assumption at all - I know that for a fact. I have written
software that analyses damaged JPEGs. There are only a handful of
cameras and applications that use custom non-standard Qtables that are
unrelated to the "examples" given in the original spec. Virtually
everything apart from Photoshop uses scaled copies of the JPEG example.

One such was PsPro 8 which included a typo in the Y matrix and various
faulty chroma downsampling algorithms which distorted the results. Such
errors are rare and are seldom detected by end users.

Not really. Tools to do this have been around more or less since the
JPEGLIB codec was completed. CJPEG can compress an image with any
arbitrary quantisation if you ask it nicely. Splicing in the fake Exif
data for a given camera signature is a pretty trivial binary edit.

It probably is - but that's not what this sw is detecting. Above.


That is all that they have claimed. I have already pointed a link at
freeware that does exactly the same job (and much the same way).

The file signature is pretty much determined by the miscellaneous dross
that each vendor adds to the header for the JPEG stream and how many
implementation ambiguities/mistakes they make in their encoding of Exif
data. Luckily most decoders can cope with quite badly malformed Exif so
there is scope for recognising certain brands there.


Again, as if you didn't read the article or see the video, the signature
aspect has to do with the content, not the additional data.


I did read the site and their description matches my interpretation of
what they are offering. The camera "signature" is in the fluff around
the JPEG stream and not in the coefficient stream itself.

http://www.fourandsix.com/fourmatch

Such "signatures" can be easily forged with the right tools.

The JPEG coefficient stream has a limited number of encoding
possibilities and only a few of them are actually seen in practice.

--
Regards,
Martin Brown
  #3  
Old September 20th 12, 10:14 PM posted to rec.photo.digital.slr-systems,alt.photography,rec.photo.digital
Alan Browne
external usenet poster
 
Posts: 12,640
Default Forensics v. Photoshop

On 2012.09.20 17:07 , Martin Brown wrote:
On 20/09/2012 21:49, Alan Browne wrote:
On 2012.09.20 04:26 , Martin Brown wrote:

There are a handful of independent JPEG implementations - most follow
the original spec closely enough that there is little or no distinction
between them (apart from in PSPro 8 which contained gross errors). It
has to be like that or you would see much worse artefacts if some JPEG
encoders made significant mistakes (as in fact happened with PsP 8).


These folks seem to have statistical evidence to the contrary which
trumps your knee jerk assumptions.

It will be judged in the marketplace of those who are concerned with
such. If there is value it will be quickly found. Or not.


I agree. Snake oil will be fairly quickly smoked out.

The only real variation is the exact choice of quantisation table and
Photoshop is distinctive there, but most of the rest use a scaled
version of the canonical JPEG standard Qtables from the original spec.


Assumption.


Not an assumption at all - I know that for a fact. I have written
software that analyses damaged JPEGs. There are only a handful of
cameras and applications that use custom non-standard Qtables that are
unrelated to the "examples" given in the original spec. Virtually
everything apart from Photoshop uses scaled copies of the JPEG example.


You've completely missed the point. I'll leave to you to go figure out
what it was.


One such was PsPro 8 which included a typo in the Y matrix and various
faulty chroma downsampling algorithms which distorted the results. Such
errors are rare and are seldom detected by end users.

Not really. Tools to do this have been around more or less since the
JPEGLIB codec was completed. CJPEG can compress an image with any
arbitrary quantisation if you ask it nicely. Splicing in the fake Exif
data for a given camera signature is a pretty trivial binary edit.

It probably is - but that's not what this sw is detecting. Above.

That is all that they have claimed. I have already pointed a link at
freeware that does exactly the same job (and much the same way).

The file signature is pretty much determined by the miscellaneous dross
that each vendor adds to the header for the JPEG stream and how many
implementation ambiguities/mistakes they make in their encoding of Exif
data. Luckily most decoders can cope with quite badly malformed Exif so
there is scope for recognising certain brands there.


Again, as if you didn't read the article or see the video, the signature
aspect has to do with the content, not the additional data.


I did read the site and their description matches my interpretation of
what they are offering. The camera "signature" is in the fluff around
the JPEG stream and not in the coefficient stream itself.

http://www.fourandsix.com/fourmatch

Such "signatures" can be easily forged with the right tools.

The JPEG coefficient stream has a limited number of encoding
possibilities and only a few of them are actually seen in practice.


As above.



--
"There were, unfortunately, no great principles on which parties were
divided – politics became a mere struggle for office."
-Sir John A. Macdonald

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Forensics v. Photoshop Alan Browne Digital Photography 83 September 29th 12 04:50 PM
Photoshop CS3 Beta review of Photoshop, parts 1, 2 and 3 Rich Digital Photography 1 December 31st 06 09:57 PM
[New] Variant of FinePix S3 for forensics and other scientific work Alan Browne Digital SLR Cameras 4 August 13th 06 05:12 PM
Photoshop Plugins Collection, updated 25/Jan/2006, ADOBE CREATIVE SUITE V2, PHOTOSHOP CS V2, PHOTOSHOP CS V8.0, 2nd edition [email protected] Digital Photography 0 February 2nd 06 07:54 AM
Photoshop CS leaves Photoshop 7 on my hard drive??? Anonymous Digital Photography 3 December 17th 04 07:31 PM


All times are GMT +1. The time now is 10:21 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PhotoBanter.com.
The comments are property of their posters.