GoKawiil
Tech News
Android Authority highlights C2PA Verify, an Android app that reads C2PA (Coalition for Content Provenance and Authenticity) metadata embedded in images to show details like the signer, creator, and editing timeline. The app is free and open source, but it cannot determine authenticity if that metadata has been stripped from a file.
Apple has introduced an opt-in feature called Apple Reference Image on the iPhone 18 Pro and Pro Max that signs pixel data straight off the camera sensor before any software processing occurs, creating what Apple calls a 'secure digital negative.' To turn this file into a usable photo, the device sends it to Apple's Private Cloud Compute, which verifies sensor and Secure Enclave signatures and device identity before producing a JPEG with a composite RSA-3072 and post-quantum ML-DSA-87 signature.
Apple has outlined a new approach called Reference Image aimed at proving whether a photo genuinely came from a real camera sensor, rather than relying on after-the-fact metadata like the C2PA standard. The method uses iPhone's secure hardware and Apple's Private Cloud Compute infrastructure to build a chain of trust starting at capture, rather than tracking edits after the fact.
The author recounts habitually dating and archiving personal projects, from essay ideas to songwriting details like key, tempo, and recording dates, citing a note found from 2022 that resurfaced this practice. The piece argues that capturing such metadata immediately, while memory is fresh, prevents future confusion about when and how creative work was made.