Schneier on Security

Apple released a system called Reference Image that cryptographically verifies a photo was taken unmodified by a new-model iPhone, and can link multiple photos to the same device, without tying the image to a specific phone or photographer's identity. Unlike competing provenance schemes that require photographers or institutions to vouch for images with their own credentials, Apple's approach avoids exposing photographer identity, which matters for people like conflict-zone photographers. The reference image is signed by Apple's signing service after validation through Private Cloud Compute (PCC), with architecture designed so Apple itself cannot access the actual image pixels. A revocation service keeps a private record of photo GUIDs and sensors for revocation purposes only, without image access or public exposure, and final revocation checks happen on-device so no party learns which photo is being checked.

Source: https://www.schneier.com/blog/archives/2026/10/apples-verified-photography-system.html. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.