-
June 15th, 2010, 11:47 PM
#11
Thread moved
Basically EXIF data is for photographers to troubleshoot their pictures..........it has no forensic relevance as it does not record amendments, and is not secure.
You can preserve some of the data such as the date, but you have to make a conscious effort to do this, and could never prove it.
It is nothing like the metadata that might be attached to a Microsoft Office document, for example.
EDIT:
The dates seem particularly irrelevant. I downloaded the sample and it reverted to my system date. When I make a copy (save as) it gives the new image the current system date. That implies that any form of editing that would require a save will change the image EXIF date.
This does sort of make sense as EXIF is not a forensics tool. It is to assist with photo editing and troubleshooting. Obviously, in that situation you are only interested in the last settings that apply to the image you are currently looking at, as they are the ones that have produced it.
Given that World + dog can alter the clocks in their cameras and computers I don't see much forensics value in that image date. Also remember that photographs can be scanned to produce a digital image, so the image date might bear absolutely no relationship to the actual photographic event.
Last edited by nihil; June 16th, 2010 at 07:05 AM.
Similar Threads
-
By pwaring in forum Other Tutorials Forum
Replies: 60
Last Post: October 22nd, 2004, 09:15 PM
-
By E5C4P3 in forum The Security Tutorials Forum
Replies: 10
Last Post: June 12th, 2002, 04:54 PM
-
By smirc in forum AntiOnline's General Chit Chat
Replies: 6
Last Post: May 13th, 2002, 04:35 PM
-
By smirc in forum AntiOnline's General Chit Chat
Replies: 3
Last Post: May 13th, 2002, 03:24 AM
-
By Noble Hamlet in forum AntiOnline's General Chit Chat
Replies: 1100
Last Post: March 17th, 2002, 09:38 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|