How to hack time, with C2PA

 (vidbuchanan.co.uk)

34 points | by Retr0id 13 hours ago

4 comments

  • mugul 30 minutes ago
    Would have been great to have that sorted out and fixed before passing the EU AI Act and forcing all content generation providers to embed C2PA manifests in their outputs...
  • bawolff 9 hours ago
    > C2PA allows for arbitrary "exclusions". These are byte ranges within the file which are excluded from signature calculations

    Glad to see we learned from the mistakes of SAML.

    [-]
    • hedora 9 hours ago
      If not this, then how would you propose updating the signed file to contain the signature?

      /s

  • IndiaInfraNotes 22 minutes ago
    [dead]
  • kaszanka 7 hours ago
    Only tangentially related, but knowing that remote attestation and co. will only ever get... "better" fills me with impotent rage like almost nothing else. https://www.lafkon.net/tc/ (2004) was so very prescient.