ZK-JPEG: Zero-Knowledge Image Editing and Compression
Posted by gslin 1 day ago
Comments
Comment by jamienk 1 day ago
We are trying to make images in the AI era be as reliable as they were pre-AI? But they were not reliable pre-AI, it was just more difficult to intentionally doctor them.
Comment by afavour 1 day ago
Comment by imagetic 22 hours ago
Comment by goodmythical 1 day ago
Even a camera obscura with a strip of film inside contains some adjustment to the "actual" image. If I expose the film for longer/shorter or during differing weather conditions, or near a train, etc, the developed film is going to have an appearance that may tinge the viewers perception of the subject. A short exposure, slightly off tilt, during a partially cloudy day, and a 'proper' exposure, rightly aligned, during full sun at noon, both of the same subject, both taken as soon as the photographer could to meet the deadline, both published on the front page of a newpaper, will give readers wildly different tastes for the subject.
Even two different b/w films will have different brightness/contrast etc, and the color films vary even more, with some punching various red/blue/green levels.
That's all without necessary deliberate intervention of the photographer. Once you get in to artistic license, you've got an even wider range. Taken from a low angle to add gravitas, taken from a high angle to minimize chin and highlight chest, with special lights to deepen shadows, with/without normal/stage makeup to add anything from regality to poverty. Taken in one's very nicest clothing, with family that is never around, while everyone has a congenial expression. (Aww, look at this lovely family)(look at the grand barren desert monument off in the wild dunes that is clearly not littered with tourists and a short walk from downtown cairo) This is easily noticeable if you've seen both a wedding and it's final professional photos. The lights didn't look like that. Where'd the audience around their first dance go? Holy shit, she looked good, but not that good.
Many have often taken photography as if it offers a genuine view of a thing at a time. We even sometimes call historical representations "snapshots". But it's never been the case.
Not sure I'd really call any photo a fake per se, they're all just representations. I suppose the fakeness comes from outside the image: the framing. If one edits a picture of a park and says "come to Always Sunny Perfect Awesomeville Where it Never Rains and is Always Full of Butterflies", then one has lied as it definitely rains there and there's certainly not always butterflies. One producing a deepfake is doing the same: capturing something they'd like captured. If it is represented as a photograph, then, sure, there's a lie; there was no photograph. But both the image with the clothes on (with lighting, editting, and makeup) and without are the same "here's what I thought it should look like" rather than "here's an exact transcript of the actual arrangement of this particular band of the electromagnetic spectrum that would have met my eye at the time"
Comment by jamienk 21 hours ago
Comment by another-dave 1 day ago
Comment by goodmythical 23 hours ago
"Hey, do me a favor, wear this hoodie and go hand this plastic baggie with white powder in it to that guy over there, it's for an art project, he's going to act like he doesn't know you, and then you just run in the opposite direction to where you'll be payed"
Or "here's three photos of XYZ taken on three seperate days at his new favorite coffee shop, notably across from this elementary school. Read on for our take on why he likes this shop so much!"
Or even something as simple as positioning the camera just so that one national head appears shorter than another. Or, in an interview, adjusting lights on the 'hero' to make them look good and highlight the shadows on the 'villain' to make them look ominous.
Use a mirror set up to make it look to the 'villain' that they are making eye contact but are instead looking weirdly askance.
Limitations are the origin of creativity. Force publishing RAW would just force journalists to be more creative in their framing.
Also, no edits for filesize? Lossless RAWs are huge! Especially from professional cameras. You could end up loading a gig of data for a single article with 10 images, or even more for larger frames. The few who care enough to see the 'real' image (that is still tainted by photographer intent regardless of file size and editting) are motivated enough to click the lossy jpg for the raw. Those who do not care aren't going to sit waiting on the order of minutes to see the first image.
Comment by jamienk 21 hours ago
Or: the CCTV is well hidden, but the people who installed it left behind some mud that got on someone's shoes and that made them late...
Comment by Gigachad 1 day ago
Provide the raw original, and the exact processing steps used to get the presentable one.
Comment by 112233 1 day ago
You cannot replace honesty with tech.
Comment by iririririr 1 day ago
/s
Comment by pixelsort 1 day ago
1. Print AI photo 2. Point fancy expensive camera at printed photo 3. Take a "real" photo
Then you'd see more sensors and even more expensive cameras. Then you'd see miniatured virtual-production volumes.
So, this is not a solution. It's just an arms race disguised as one.
Comment by augunrik 1 day ago
Comment by dexen 1 day ago
Comment by nolok 23 hours ago
Comment by ImHereToVote 1 day ago
Comment by tacomagick 1 day ago
Comment by ImHereToVote 24 minutes ago
Comment by AmazingEveryDay 1 day ago
Comment by Gigachad 1 day ago
Having a tick showing the photo is verified real would add a lot of trust to online platforms.
Comment by tosapple 1 day ago
Comment by rerdavies 1 day ago
Comment by fwip 1 day ago
Comment by avianlyric 1 day ago
https://www.bbc.co.uk/news/live/ce9yydgmzdvt?post=asset%3Aae...
https://www.france24.com/en/middle-east/20260417-press-assoc...
There’s now even a wiki article on the usage of AI generated images in American politics, mostly dealing with the obvious slop that Trump has produced, rather than insidious edits of real images
https://en.wikipedia.org/wiki/AI-generated_content_in_Americ...
Comment by mvid 1 day ago
Comment by Retr0id 1 day ago
> our tool can verify a large family of image transformations
Is this family large enough to transform real image A into arbitrary fake image B?
> ZK-JPEG can merge transparent or translucent layers into an image, useful for placing visual watermarks, creating double exposures, or merging visual layers, potentially AI generated over portions of the image. In our tool, the transparent layer is revealed, but anything beneath an opaque portion of the layer becomes secret. Note that in the case of an AI generated layer, the layer itself is revealed, minimizing the dishonesty in using generative AI (but not minimizing the dishonesty of stealing artwork to train the AI)
Seems like the answer to my question is "yes", so you have to carefully inspect the transformations to see if they look legit. (The parenthetical was a surprising inclusion in an academic context)
Comment by bawolff 1 day ago
Like first you have to show you can do everything necessary in the system which is what this paper does. Step 2 is coming up with a policy of what restrictions to place on allowed transformations
Comment by gblargg 1 day ago
Comment by Retr0id 1 day ago
Comment by j2kun 1 day ago
Could this be simpler and more efficient without ZK?
Comment by progbits 1 day ago
Imagine a photo with some blacked out rectangles, and a ZK proof that confirms it comes from an attested "real" photo + adding those rectangles, but no other modification.
Comment by nullc 14 hours ago
The proof must be MUCH smaller than the whole computation or even the inputs (otherwise, just provide the uncompressed image!).
And the proof has to resist forgery.
So going for succinctness and at least computational soundness gets you to zero knowledge 'for free'.
Plus as the dead sibling comment notes: You may want disclosed modifications like a crop or redaction where the committed information remains private but you want to keep the proof.
Comment by sisuo30390 23 hours ago
Comment by WorseIsBetter 1 day ago
Comment by huflungdung 1 day ago