← Back to context

Comment by ks2048

14 hours ago

If that became popular, the AIs would learn how to generate a realistic depth map along with any generated image.

21 comments

ks2048

Reply
bayindirh  33 minutes ago

> generate a realistic depth map along with any generated image.

There are already pretty good depth map generation algorithms (for a decade or so) which works on 2D images.

Generate the image, feed it to a depth map generator, viola.

However, you can't get it signed by the sensor itself. That'd be hard.

lokar  14 hours ago

How would that work? I thought the premise here is that you can fool the apple camera by taking a (very carefully aligned) picture of a still image (printed out).

A depth map from the apple camera (again, signed) would show that the entire image had the same distance from the camera.

  • ks2048  6 hours ago

    You're right. I think my comment above doesn't make sense - it wouldn't help in this case.

Gigachad  13 hours ago

The photos are cryptographically signed in the apple image pipeline so it's not as simple as just AI generating something. That said, I can't see how this is any different to all the other times we have embedded crypto keys in consumer hardware where eventually someone finds a way to extract the key and the whole thing is busted open.

  • khalic  10 minutes ago

    Nobody has breached the Secure Enclave, not sure it’s doable without investing millions in direct circuit manipulation. Seems good enough

  • jaggederest  13 hours ago

    Given the whole private cloud bit, I am assuming they keep the private keys server side and never let them out.

    • lxgr  5 hours ago

      How would the server know that the request is coming from a real iPhone?

      This is a pretty standard application of trusted computing and can be done entirely on the iPhone. A server would only possibly be needed for anonymization (while retaining key revocation capabilities if a key does end up leaking), but there are serverless ways to do even that (TPMs have supported these for a while now).

      2 replies →

    • monocasa  10 hours ago

      I think there's a chain of trust. The sensor signs raws, and the private cloud takes signed raws, does minimal processing so they're at least coherent, and re signs that output (maybe even including the original signed raw as well in the image file).

    • Gigachad  13 hours ago

      That's a good point, You might still be able to trick the cloud to sign your photos, but that's something they could patch in updates without losing control of the key. They could have the server only sign photos taken on the latest ios version.

      2 replies →