Dr. Neal: Researcher's Analysis of al Qaeda Images Reveals Surprises

["Paul Ferguson" <fergdawg () netzero net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Way to go, Neal. :-)

[snip]

Neal Krawetz, a researcher and computer security consultant, gave an
interesting presentation today at the BlackHat security conference in Las
Vegas about analyzing digital photographs and video images for alterations
and enhancements.

Using a program he wrote (and provided on the conference CD-ROM) Krawetz
could print out the quantization tables in a JPEG file (that indicate how
the image was compressed) and determine the last tool that created the
image -- that is, the make and model of the camera if the image is original
or the version of Photoshop that was used to alter and re-save the image.

Comparing that data to the metadata embedded in the image he could
determine if the photo was original or had been re-saved or altered. Then,
using error level analysis of an image he could determine what were the
last parts of an image that were added or modified.

[snip]

More:
http://blog.wired.com/27bstroke6/2007/08/researchers-ana.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGsRKBq1pz9mNUZTMRAvyEAJ4jlnx/yB8AIxlS+jpqeytmzEPS8ACgnI2T
tsKXo5QbxpzSpg02R9PiDZQ=
=8zEU
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.