top | item 46917355

(no title)

vbezhenar | 23 days ago

Put private key into every digital camera and hash/sign every frame. That private key is accompanied with manufacturer signature and can't be easily extracted. Mark all unsigned media as suspicious.

discuss

order

widdershins|23 days ago

"and can't be easily extracted" is doing a lot of work there. People are very good at reverse-engineering. There would soon be a black market for 'clean' private keys that could be used to sign any video you want.

nerdsniper|23 days ago

There's also always the "analog loophole". Display the AI-generated video on a sufficiently high-resolution / color gamut display and record it on whatever device has convenient specs for making the recording, then do some light post-processing to fix moire/color/geometry. This would likely be detectable, but could shift the burden of (dis-)proof to the defendant, who might not have the money for the expert witnesses required to properly argue the technical merits of their case.

More likely, the signing would have to use compression-resistant steganography, otherwise it's pretty easy to just remux/re-encode the video to strip the metadata.

munk-a|23 days ago

There would also be a requirement for all playback to actually properly check the private keys and for all the parties involved in the process to be acting in good faith. Not only would you have a black market for individuals to scalp clean keys but you'd likely have nation states with interests putting pressure on local manufacturers to give them backdoors.

We'd probably hit a lot of that with SSL if it wasn't so unimportant from a political perspective[1]... but if the thing we were trying to secure is going to boost or damage some prominent politician directly then the level of pressure is going to be on a whole different scale.

1. And we might still have that corruption of SSL when it comes to targeted phishing attacks.

eqvinox|23 days ago

"can't easily be extracted" = "the number of people who can extract it is small but still non-zero"

And those people now have the power to put you in jail, by putting your camera's signature on illegal content.

You've also just made journalism 3 notches harder. Like documenting atrocities in, say, North Korea. Or for whistleblowers in your home steel mill run by a corporate slavedriver.

Oh. Also. Why are you choosing the camera side to put this on? Why not the AI side? Require watermarks and signatures for anything created in such a way…

…of course that has its own set of intractable problems.

nerdsniper|23 days ago

Ideally, the keys would be per-manufacturer, like HDCP or (DVD-)CSS. Personally I don't think I'd love the idea of any kind of attestation like this, but if TPTB did implement it, I'd prefer a key per-manufacturer rather than each unit having its own unique signing key. We do have precedent, in the form of printer tracking dots, which were kept 'secret' from the public for 20 years. [0]

0: https://en.wikipedia.org/wiki/Printer_tracking_dots

caterama|23 days ago

That makes it easy to prove authenticity (has signature), but doesn’t solve the “prove it’s fake” problem.

nerdsniper|23 days ago

Ideally, the prosecutor bears the burden of proof. We generally shouldn't impose systems that require defendants to prove a negative. I recognize that reality does not necessarily match this ideal.

malfist|23 days ago

That certainly won't be used to violate someone's privacy.

acessoproibido|23 days ago

More surveillance and tracking won't be the solution.