"However, the intention to enforce so-called content credentials as an attribute of credibility also reveals the well-known walled garden mentality of market-dominating technology companies." by @evisualyn.bsky.social with a nice electronic waste part. ahnp.ub.uni-heidelberg.de/journals/dah...

The Adobe’s Content Authenticity bros have updated their verifier UX, after 6 years... It looks like they have expanded the attack surface... My 2 years old forgeries are working again! 🥳 Can you guess which Content Credential is forged, just by looking at the left column? 😬

The Adobe’s C2PA bros have published a guide on using Content Credentials under new AI regulations. They managed to break it immediately by throwing in a custom `asset-type-choice` rule for inference parameters.🍹 No compliant verifiers will actually be able to read it. c2pa.org/a-new-implem...

Higgsfield AI, another genAI wrapper, has started to use C2PA for its slop. It's not interoperable and supports only the legacy trust list. In short: Nothing for the end-user the C2PA is aimed at. But C2PA has always been for regulators: Higgsfield AI will probably be compliant with the EU-AI Act.

The @contentauth.bsky.social got feedback from journalists and fact-checkers. But it was ignored as it was contradicting the AI industry narrative for AI self-regulation with C2PA. The recent genAI google Earth fiasco is a perfect example. www.niemanlab.org/2026/07/ai-a...

AI authentication tools are built without adequate journalist input, new report finds

It has never been easier (or cheaper) to fake and alter media. The evidence that journalists rely on to verify facts — photographs, videos, documents, websites, and even audio calls with sources — can...

niemanlab.org

bots don't cry@botsdontcry1.bsky.social · 3w ago

Is the BBC being weaponized as a salesman for the AI industry? Despite years of C2PA failures, the BBC continues to push Adobe's narrative, the misleading "Nutrition label", and is now funding this exact, broken setup for Ukraine’s public media during an active information war. 🤮

Please meet @andyparsons.net , Adobe Executive who risks journalists' lives to pump his stock portfolio. He said to @marinaadami.bsky.social: "With the exclusion of GPS [...], the Google Pixel phone will sign all [...]" That's a lie: proof in his own repo: raw.githubusercontent.com/contentauth/...

3 multi-billion dollars AI companies. 2 Certificate Authorities. All bound by Google’s C2PA conformance program. A single chain of trust. A mille-feuille of failures. Image 1: Open AI genAI, SSL.com certificates Image 2: Open AI genAI, Trufo certificates

Is the BBC being weaponized as a salesman for the AI industry? Despite years of C2PA failures, the BBC continues to push Adobe's narrative, the misleading "Nutrition label", and is now funding this exact, broken setup for Ukraine’s public media during an active information war. 🤮

bots don't cry@botsdontcry1.bsky.social · 3w ago

The BBC press release! Claiming "an unbroken chain of trust from the first shot through to publication". It requires all parties compatible trust lists, and implementations. Sony 📸certs are for Sony Ci Media Cloud workflows only💰, can't be used with the Adobe Cloud. www.bbc.co.uk/mediacentre/...

The BBC press release! Claiming "an unbroken chain of trust from the first shot through to publication". It requires all parties compatible trust lists, and implementations. Sony 📸certs are for Sony Ci Media Cloud workflows only💰, can't be used with the Adobe Cloud. www.bbc.co.uk/mediacentre/...

Providing Ukrainian audiences with content they can trust

A new ‘nutrition label’ for its content, ensuring audiences receive information they can trust in wartime

bbc.co.uk

bots don't cry@botsdontcry1.bsky.social · 4w ago

I found the demo: the image is not trusted by the official verifier, certificates missing. They patched it on their demo with their own certificates. With a nice biased BBC survey, to claim later that C2PA increase trust. Image taken 2026-05-31 + Photoshop & Lightroom suspilne.media/1333984-pere...

I found the demo: the image is not trusted by the official verifier, certificates missing. They patched it on their demo with their own certificates. With a nice biased BBC survey, to claim later that C2PA increase trust. Image taken 2026-05-31 + Photoshop & Lightroom suspilne.media/1333984-pere...

bots don't cry@botsdontcry1.bsky.social · 4w ago

Looks like the BBC is spinning their C2PA implementation disaster. And @contentauth.bsky.social is in need of PR since they can't afford Wired advertorials anymore. It’s not working! 😬 but a total win for the journalists who got 2 new cameras out of the deal. corp.suspilne.media/en/top-stori...

Looks like the BBC is spinning their C2PA implementation disaster. And @contentauth.bsky.social is in need of PR since they can't afford Wired advertorials anymore. It’s not working! 😬 but a total win for the journalists who got 2 new cameras out of the deal. corp.suspilne.media/en/top-stori...

Bing Image Creator has lost its Content Credentials, no more C2PA for its users. A moment of silence for Microsoft Responsible AI Governance Framework, just in time to troll the EU AI Act. Why retiring a flawed technology?, couldn't Copilot fix it?

I have updated my corrections on page 9, as it looks you can be on the official "conforming" product list without a product. It's vaporware. In the case of Xiaomi and Qualcomm, they don't have any trusted certificates. Why would you do that? 😂

bots don't cry@botsdontcry1.bsky.social · 4w ago

The "scenarios" depicted in the report are already the reality of C2PA, conformant or not. page 9 about "conforming product" is really misleading, up to the url. The conformance list in short: Google. An advertising company, for a report on c2pa privacy. 😅 library.witness.org/product/c2pa...

The "scenarios" depicted in the report are already the reality of C2PA, conformant or not. page 9 about "conforming product" is really misleading, up to the url. The conformance list in short: Google. An advertising company, for a report on c2pa privacy. 😅 library.witness.org/product/c2pa...

bots don't cry@botsdontcry1.bsky.social · 4w ago

New C2PA report! The authors probably had to walk on eggs to please the @contentauth.bsky.social plutocracy. But I can feel the satire: "The value of the ecosystem depends on it being governed as seriously as it is built." 🤣 bsky.app/profile/ingo...

New C2PA report! The authors probably had to walk on eggs to please the @contentauth.bsky.social plutocracy. But I can feel the satire: "The value of the ecosystem depends on it being governed as seriously as it is built." 🤣 bsky.app/profile/ingo...

@IngoBoltz@ingoboltz.bsky.social · 4w ago

Just out from the excellent folks over at Witness.org - With some contributions from yours truly. C2PA Content Credentials and the Surveillance Risk: Adversarial Scenarios and Governance Gaps in the Content Provenance Ecosystem - Library library.witness.org/...

Of course, The C2PA "Conformant" signers from Google & OpenAI completely wipe out Adobe's provenance, crafted with love & greed, to overwrite it with their own: tracking for Google and nothing for ChatGPT (whose timestamp certificate isn't even trusted to show a creation date).

bots don't cry@botsdontcry1.bsky.social · last mo.

Adobe Firefly C2PA update! Adobe has brought back its fancy AI reference thumbnails, probably to impress some regulator. In their great kindness, they bundle them as PNG and duplicate them like a goose, probably to impress some trader. That's 7.3MB of AI slop that should only take up 1.0MB.

Adobe Firefly C2PA update! Adobe has brought back its fancy AI reference thumbnails, probably to impress some regulator. In their great kindness, they bundle them as PNG and duplicate them like a goose, probably to impress some trader. That's 7.3MB of AI slop that should only take up 1.0MB.

󠄳󠄢󠅀󠄱󠅄󠅈󠅄︀︁︀︀︀︄󠇎The latest Leica SL3-P camera ships, of course, with C2PA to prove "authenticity". Except It uses a vintage C2PA: only "interoperable" with other legacy software, like the Adobe ones. But it still does an excellent job proving your Affluentity.

You may wonder how can Adobe @contentauth.bsky.social "Adobe content Authenticity" validates what other C2PA verifiers reject? It should be be the source of truth since it is the only one "conformant"? 🤣 It turns out that "Adobe content Authenticity" validates shit, literally, example:

bots don't cry@botsdontcry1.bsky.social · last mo.

C2PA verifiers in June 2026, in 4 screenshots: ❌ Official one: dead ❌ The “files never leave your device* (*except to call Adobe)”, by @andyparsons.net. ❌ A popular SEO‑bait edition. ✅ The “we upload everything to our servers” Adobe‑conformant. The signed image: shorturl.at/8IgkM Links in ALT

C2PA verifiers in June 2026, in 4 screenshots: ❌ Official one: dead ❌ The “files never leave your device* (*except to call Adobe)”, by @andyparsons.net. ❌ A popular SEO‑bait edition. ✅ The “we upload everything to our servers” Adobe‑conformant. The signed image: shorturl.at/8IgkM Links in ALT

🎉 Positive C2PA news! - Conformant C2PAs are interoperable with Google Nano Banana (note: PII is not redacted) - A better C2PA verifier by IPTC: originverify.iptc.org (the official Adobe one is misleading & not maintained) - A proper Camera app by @nathan.freitas.net proofmode.org/blog/proofmo... 👏

Adobe is again misleading regulators while promoting the CREATOR Act, claiming C2PA can signal artists’ TDM preferences (Text/Training and Data Mining). blog.adobe.com/en/publish/2... C2PA explicitly clarified to an EU consultation that it cannot. @repyvetteclarke.bsky.social @foushee.house.gov ?

It took 5 months for @adobe.com @contentauth.bsky.social to take action on a severity "High" "Uncontrolled Resource Consumption vulnerability." affecting their C2PA verifier. The "attacker" was Google Gemini bloated C2PA. Because, you know, C2PA is "interoperable". nvd.nist.gov/vuln/detail/...

bots don't cry@botsdontcry1.bsky.social · 5mo ago

It only took two whole months before someone finally create an issue that Google C2PA implementations are basically DoS‑ing the official @adobe.com @contentauth.bsky.social validators. github.com/contentauth/...

The Google C2PA lead is casually mansplaining "How the [Gemini/C2PA] architecture works". If the LLM is trained on conform C2PA for genAI: there was only the Google ones available (filled with proprietary data) at the time of training. This means the C2PA CAN NOT get explained to the end user.

Even experienced reporters get caught citing AI slop. A @theverge article by @zombiewretch.bsky.social is citing an SEO AI Slop Farm, c2pa(dot)ai as evidence for C2PA adoption. Is there a way to fix this @reckless.bsky.social, @davidpierce.xyz ? www.theverge.com/ai-artificia...

R.I.P. @adobe.com @contentauth.bsky.social "Adobe Content Authenticity". Deceit was its only consistency, hidden under perpetual betas and manufactured goodwill. "Adobe Content Authenticity" was the final pathetic spasm of a company rotting from the inside. 2024-10-08 - 2026-05-19

bots don't cry@botsdontcry1.bsky.social · 2y ago

Content Authenticity Initiative explained, as an Adobe product: bsky.app/profile/bots...

Great! Google has upgraded its AI image verification. So let's try it again with a good old DALL·E 3 image. The verdict? It STILL fails spectacularly. Worse: it ends up granting legitimacy to the very fakes it’s meant to expose.

bots don't cry@botsdontcry1.bsky.social · 9mo ago

Great! Google rolls out its shiny new AI image verification. So let’s put it to the test with two genAI images: one from DALL·E 3, and one from the latest Nano Banana 3 The verdict? It fails spectacularly. Worse: it ends up granting legitimacy to the very fakes it’s meant to expose.

Great! OpenAI has rolled out a C2PA verifier, "for safer, more transparent AI‑slop provenance." The tool, vibe coded under an intern’s armpit, labels any C2PA‑signed AI output as if it were generated with OpenAI’s own systems. The genAI laundering season has officially begun. openai.com/verify/

The OpenAI C2PA implementation has been totally dysfunctional for more than a month. The new implementation by Trufo AI (with watermarks?) for gpt-image 2 is not any better than the previous @truepic.bsky.social disaster. As always, C2PA is just there to please regulators.

A research paper about Security Analysis of C2PA and its Implementation, not AI industry sponsored. "Our results show that the specifications and the current implemented C2PA ecosystem do not yet provide the guarantees required for reliable deployment or standards adoption." eprint.iacr.org/2026/804

Verifying Provenance of Digital Media: Security Analysis of C2PA and its Implementation

Generative AI and advanced editing tools enable malicious actors to create high-quality fake images that can facilitate fraud, attack reputations, and manipulate elections. We analyze security proper-...

eprint.iacr.org