Comment by bawolff

I'm not sure i would describe the linked exploit as "trivial", but nonetheless point taken.

Ultimately though, i think all this might just mean we do not have a practical solution to this problem.

just to throw out some naive ideas, maybe the solution is to just sign the raw camera output and embed it in the metadata. If this is an optional feature meant for photojournalists, does file size really matter?