Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Ok, I've signed my cellphone footage of a crime being committed. Now what? How does that prove my footage was taken where I said, when I said?


I was thinking more along the lines of hardware manufacturers implementing a secure enclave style of signing files as they're recorded. The sig could be tagged with location/date if available, but at least the video would be verifiable. The web of trust would have to exist for reprocessors and media outlets who like to edit footage.


>at least the video would be verifiable

Nope, it'll just give well-executed fakes a veneer of legitimacy. A state-level actor will have easy access to the signing keys. Non-state-level actors could potentially extract them from a device or bribe an engineer at a third-tier Chinese OEM. A reasonably competent hardware hacker could desolder the CCD from a signed device and feed whatever video signal they like into it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: