Apple's New System Checks Photos Without Showing Who Took Them
Apple released a new tool that proves an iPhone photo is real without revealing who took it. The system protects privacy by keeping the actual picture hidden from Apple and everyone else.
In short: Apple released a new tool that proves an iPhone photo is real without revealing who took it. The system protects privacy by keeping the actual picture hidden from Apple and everyone else.
It is getting harder to tell if a photo is real or fake, but a new technology tries to fix this without taking away the photographer's privacy.
What happened, in plain words
Apple announced a system called Reference Image that checks if a picture is exactly as an iPhone captured it. Unlike other methods that force photographers to use public IDs or credentials to prove a photo is authentic, Apple's system does not link the photo to a specific person or phone. Instead, Apple's signing service signs the reference image after it goes through a validation check. The process keeps the actual pixels of the photo private, meaning even Apple cannot see the image data.
Key points
- Works without public IDs The system avoids using explicit public credentials for photographers so they can keep their anonymity in dangerous areas like conflict zones.
- Keeps image pixels private Capturing a reference image does not expose the actual picture data to Apple or anyone else.
- Uses secure nodes The architecture ensures that not even Apple can access the image data.
- Protects privacy during checks Devices use on-device lists for revocation checks so they never reveal to anyone which photo they are looking at.
Terms explained
- Reference Image — A system that proves a photo is exactly as it was captured by an iPhone. Example: A digital stamp on a digital picture that shows it is genuine.
- Credentials — Official details or identification that prove who someone is. Example: Showing a security badge to prove you belong in a building.
- Revocation — Canceling something so it is no longer valid. Example: Deactivating a lost library card so nobody else can use it.
- GUID — A unique code used to identify information without using a person's name. Example: A barcode on a package that separates it from all other packages.
Why it matters
This system could help prove that photos taken in difficult locations are genuine without putting the photographers in danger by exposing their identities.
What we still don't know
The system only works on new iPhone models, and the source notes that a revocation service must still keep a private record of photo codes and associated sensors.
Based on reporting from Bruce Schneier. This is an independent explainer, written in our own words with AI assistance; Bruce Schneier has not reviewed or endorsed it. Read the original for the full details.