kennethbspringer.au
@kennethspringer@infosec.exchange
Founder of snapWONDERS and builder of Vaultify — a digital media forensics platform running across clearnet, Tor, and I2P. What I work on: metadata excavation, JPEG encoder fingerprinting (identifying camera model and encoding software from compression structure alone — no EXIF needed), steganography detection and hiding, GPS triangulation, and manipulation detection. The core idea: standard metadata stripping tools remove the labels but leave the fingerprint. The quantisation tables baked into JPEG compression by camera firmware survive every strip. Vaultify finds them. Senior full-stack developer and tech lead by day. Building snapWONDERS on the side — forensics, privacy, and deep dives into file format internals. snapwonders.com · vaultify.snapwonders.com #digitalforensics #OSINT #steganography #infosec #privacy #metadata
infosec.exchange
You've seen the little "cr" badge start showing up on images. Do you know what it actually proves — and what it doesn't?
It's not a vibe check. It's a COSE-signed certificate chain sitting inside a JUMBF box in a JPEG's APP11 segment (or a PNG caBX chunk). The signature proves two things and only two: which tool or camera signed the manifest, and that the pixel data hasn't changed since. That's the entire guarantee.
The digitalSourceType field inside that manifest is what tells LinkedIn's badge to say "AI-generated" instead of "camera capture" — trainedAlgorithmicMedia vs digitalCapture. LinkedIn reads it. X is rolling out the same read.
Where it stops: no manifest, no proof either way. The chain says nothing about who the human behind the tool is, and most images in circulation still carry no manifest at all — that's normal, not suspicious.
snapWONDERS validates the full chain on every upload — signature, hash binding, source type — and feeds it into the authenticity score. Full breakdown: https://kennethbspringer.au/2026/07/09/think-twice-before-claiming-ai-work-as-your-own-what-c2pa-content-credentials-prove/?utm_source=mastodon&utm_medium=social&utm_campaign=article-10
#OSINT #digitalforensics #infosec #C2PA #contentauthenticity