upvote
Apple's current implementation doesn't integrate LiDAR. And LiDAR wouldn't be enough here, it's trivial to block the projector and hide the dot pattern. No dot pattern = iPhone thinks the object is far away, which is what happens in landscape photos.

A better fix is to take photos with all three iPhone cameras simultaneously, ideally as a 2-3s video, and use the parallax/multiple perspectives to extract depth information. The video files (Possibly audio too) could also be included with the verified image as additional verification.

They can also prevent photos if iPhone detects the LiDAR sensor is covered, similar to how Meta does it with their camera glasses.

reply
> all three iPhone cameras simultaneously, ideally as a 2-3s video, and use the parallax/multiple perspectives to extract depth information.

I think optics could be used to make each camera see a different image.

A video could show shake, which could be verified against readings from the phone's accelerometer -- but you could just hold it still and claim that it was on a tripod.

reply
> it's trivial to block the projector and hide the dot pattern. No dot pattern = iPhone thinks the object is far away, which is what happens in landscape photos.

I've never looked at the LiDAR hardware, but where is the emitter in relation to the receiver. Why would the LiDAR not reflect off of whatever you're blocking it with and return a very short flight meaning it was very close?

reply
Paint the stopper vantablack then.
reply
I knew keeping a pot of vantablack in my jacket pocket would come in handy.
reply
I don't think it's an either or - additional data signals that need to correlate to authenticate will increase confidence. You can use multiple other signals to evaluate whether something is truly a landscape photo, and in that case not require a LiDAR capture, but if you are inside and at close range then you could assume that it should be part of scoring the authentication.

Similarly, LiDAR alone will help disqualify cases where someone is just taking a picture of e.g. a landscape target of the Golden Gate, but that it shown on a screen 1 meter away.

reply
Right but I’d argue that realistically this feature is going to be most useful when taking photos of things reasonably close by, people especially, rather than landscape photography.
reply
This approach makes me wonder if the future is actually going to move towards visual cryptography.
reply
[flagged]
reply
iPhone lidar only works up to like 16 feet in the easiest lighting conditions (indoors) and may be functionally ineffective outdoors.
reply
Still, that means that either the fake target scene and your screen presenting it would need to be outside of LiDAR sensor bounds, or you'd need to find a way to make the depth sensor data conform with your fake scene, both increasing the difficulty of producing a forgery.
reply
https://news.ycombinator.com/item?id=49721878

> increasing the difficulty of producing a forgery

The problem with this thinking is twofold:

1) Whether it actually meaningfully increases the difficulty of a forgery remains to be seen. Despite their initial language about discerning real events, we see no details here about what scene information is used.

2) It increases the potential value of a forgery because now your forgery is attested by Apple.

So it either makes it easier to defraud people or more worthwhile to put in the effort to defraud people or both. None of those outcomes are great.

reply
So you need a big enough screen to cover the entire field of view at 16 ft? Sounds expensive
reply
Or, probably just some optics, like a slanted $9 IR mirror [1] in front of it, to direct the lidar to the sky/absorption box. Then you can point at the high res HDR TV that's probably already in your living room.

[1] https://commonlands.com/products/ir-cut-filters-csp650?srslt...

reply
Well, first, that's only expensive if you're poor. The world is absolutely full of people who can easily piss away your entire annual income throwing a house party.

But I really mean that if the lidar barely works outdoors anyway then actually you don't need to be 16 feet away at all.

Anyway, one may presume that they've thought about this.

reply
Thought about it and also are bright enough not to fall for the “if a single person dies wearing a seat belt, we should abandon seat belts because they do no good at all” fallacy.

It’s almost certainly possible to fool v1 of this system, for some images, in some contexts. It would be shocking if the first implementation was completely perfect. But maybe it’s better than nothing?

reply
The problem is that if defeating it is trivial, then it _authenticates_ fake images.

The problem is that it makes it easier to fool people and provide "cryptographic" evidence of validity, backed by big tech.

It's purpose is to stop bad actors from passing of fake as real just as much as it is to prevent real images being dismissed as fake.

reply
> It’s almost certainly possible to fool v1 of this system, for some images, in some contexts. It would be shocking if the first implementation was completely perfect.

Knowing Apple, they've been working on and testing Apple Reference Image for years.

It being perfect isn't the issue; it's that random people on the internet who are just learning about this assume Apple's engineers haven't already thought about everything (and more) mentioned in this thread.

reply
> It being perfect isn't the issue; it's that random people on the internet who are just learning about this assume Apple's engineers haven't already thought about everything (and more) mentioned in this thread.

Given how many bugs there are in macOS and how long they have remained there, I (who have been writing iOS apps from the release of the first retina iPod touch until AI got good) functionally agree with such people; at best, I think Apple's engineers haven't actually solved everything (and more) mentioned in this thread, even if every one of these things may have come up in discussions and even reached an official backlog or task list or similar.

reply
If they thought about it, then why isn't this very obvious failure point even mentioned in the technical breakdown?
reply
> But maybe it’s better than nothing?

I think this will depend on how it gets used. I can imagine numerous outcomes where it's in fact worse than nothing (significantly more effective blackmail, for instance).

reply
> maybe it’s better than nothing?

While that is not quite my bar of confidence when implementing wide-reaching technologies that have numerous unexplored knock-on effects, I guess the calculus must have been different on Infinite Loop recently.

reply
I like that seatbelt argument example.

I’ve seen that type of argument a million times, and I’ll certainly reuse that.

reply
Put some sugar on it. Please.
reply
Def Leppard, is that you?
reply
furthermore, couldnt you do parallax from the multiple cameras as well as flicker the flash?

seems pretty easy to make it sufficiently difficult to trick the system

reply