Lightnews — Scholar-powered news

bots don't cry @botsdontcry1.bsky.social · 1d

Do you remember when implementations of the #C2PA standard were both secure and interoperable?

None of the Tailly “Slop” Norwood images, regurgitated straight from the GPU pipelines of Black Forest Labs "Flux" and Runway ML (Google, Nvidia, Salesforce) have valid C2PA provenance labels.

Black Forest Labs "Flux"
"name": "Black Forest Labs API",
"org.cai.c2pa_rs": "0.38.0"
Not updated in 12 months, based on deprecated specs

Runway ML, "claim_generator": "c2pa-rs/0.35.1 c2pa-rs/0.35.1", Not updated in 12 months, based on deprecated specs

bots don't cry @botsdontcry1.bsky.social · 2d

C2PA is overseen by the Joint Development Foundation (JDF), which holds the specification and the C2PA™ trademark.
The Linux Foundation merely provides services, staff and support.

Note: Despite pulling in $292 million in 2024, the Linux Foundation devoted just $6 million (2%) to the Linux kernel.

1

bots don't cry @botsdontcry1.bsky.social · 3d

Verifox by golimbo.ai is now officially a #C2PA conforming product. 🤔

github.com/c2pa-org/con...

AI generated website, of course. With stock images placeholders

Limbo AI, LLC is registered at Buenaventura Lakes Florida 34743
https://www.golimbo.ai/index#contact gives Kissimmee, FL 34743 US as contact address

1

bots don't cry @botsdontcry1.bsky.social · 3d

How did the "Adobe Content Authenticity Inspect" tool come to be included in the conforming products list, while still in "beta" and far from being "secure and interoperable"?

Which open‑source tool is listed in the conforming products list?

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · 6d

"the C2PA Conformance Program provides a formal mechanism to ensure that implementations of the C2PA standard for Content Credentials are both secure and interoperable"

🥳 to @adobe.com @contentauth.bsky.social @andyparsons.net for having the "Adobe Content Authenticity" #spyware passing the test.

bots don't cry @botsdontcry1.bsky.social · 6d

It's not a processor issue.

Adobe managed to get its #C2PA "Inspect" tool into the C2PA "conforming-products" list.

Their tool is still validating hacked Nikon images.

It's a total failure.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · 6d

"the C2PA Conformance Program provides a formal mechanism to ensure that implementations of the C2PA standard for Content Credentials are both secure and interoperable"

🥳 to @adobe.com @contentauth.bsky.social @andyparsons.net for having the "Adobe Content Authenticity" #spyware passing the test.

bots don't cry @botsdontcry1.bsky.social · 6d

"the C2PA Conformance Program provides a formal mechanism to ensure that implementations of the C2PA standard for Content Credentials are both secure and interoperable"

🥳 to @adobe.com @contentauth.bsky.social @andyparsons.net for having the "Adobe Content Authenticity" #spyware passing the test.

bots don't cry @botsdontcry1.bsky.social · 7d

Nikon joined c2pa in 2021.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Sep 5

Yet another entry in the ever-growing catalog of #C2PA implementation disasters: Nikon.

- 3 years in the making: first prototype in October 2022
- It adhered to C2PA version 1.4: a spec already two years out of date and officially phased out.
- Suspended after a week.
imagingcloud.nikon.com/news/

September 5, 2025
Notice of Temporary Suspension of the Nikon Authenticity Service

Thank you for using Nikon Imaging Cloud.
We have confirmed that an issue has been identified in the Nikon Authenticity Service. In response to this confirmation, the service has been temporarily suspended while we work diligently to resolve the issue. We will provide an update as soon as the corrective measures are complete.
We sincerely apologize for any inconvenience this may have caused.

1 2

bots don't cry @botsdontcry1.bsky.social · 7d

The Nikon camera was hacked in a week, and in any case was not compliant.
www.dpreview.com/articles/272...

Overlay oversight: forum member exposes weakness in Nikon's Content Credentials

DPReview reader Horshack got a Z6III to sign an image it probably shouldn't have.

www.dpreview.com

1 3

bots don't cry @botsdontcry1.bsky.social · 7d

Despite receiving 10 million Norwegian kroner in funding (around US $1 million), the Norwegian campaign for truth and authenticity in news media ended up being non‑compliant and vulnerable to forgery.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Sep 11

#C2PA is a wasteland:

"Open standard"? unreadable specs → non‑compliant results.
"Open source code"? guarded by @adobe.com → bloated & painful to debug.

Result:
#IPTC , the global standards body of the news media, fails compliance, and their Verify tool (@adobe.com) blesses forgeries.

1

bots don't cry @botsdontcry1.bsky.social · 13d

Oops, turns out the code "is" online.

And I was spot‑on about the watermark: it’s literally commented as “FFmpeg command with advanced watermark settings” 😂

$# Construct the watermark text watermark_text = uuid_result # Escape special characters in watermark_text #watermark_text = watermark_text.replace("'", "\\'").replace('"', '\\"').replace('-','_').replace('urn:uuid:','') watermark_text = watermark_text.replace('urn:uuid:','') # Log the watermark text for debugging logger.info(f"Watermark text: {watermark_text}") # Construct the FFmpeg command with advanced watermark settings cmd = ( f'ffmpeg -y -i "{input_file}" ' f'-vf "drawtext=' f'text=\'urn_uuid_{watermark_text}\':' # Watermark text f'fontfile=/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf:' # Font file f'fontsize=24:' # Font size f'fontcolor=white:' # Font color f'box=1:' # Enable background box f'boxcolor=black@0.5:' # Semi-transparent black background f'x=10:' # X position f'y=10:' # Y position f'shadowx=2:' # Shadow X offset f'shadowy=2:' # Shadow Y offset f'shadowcolor=black@0.5' # Shadow color f'" ' f'-c:a copy ' # Copy audio stream without re-encoding f'-metadata title="C2PA Watermarked Video" ' # Add metadata f'-metadata comment="Contains C2PA UUID: {watermark_text}" ' f'"{output_file}"' ) try: logger.info(f"Starting watermark process for file: {input_file}") logger.info(f"FFmpeg command: {cmd}") # Run ffmpeg with timeout and proper error handling result = subprocess.run( cmd, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=3600 # 1 hour timeout )$

bots don't cry @botsdontcry1.bsky.social · 13d

Sadly, C2PA isn’t a real fix:

- Web crawlers ignore C2PA data (except Google Search, and only for Pixel 10 images).

- The "Opt‑Out" feature is an Adobe marketing promise, there’s no enforcement behind it.

- History shows that digital watermarks are notoriously ineffective across the industry.

1 1

bots don't cry @botsdontcry1.bsky.social · 14d

The BBC calls its C2PA "stamping tool" open source, yet no repo exists.

From what I saw at IBC, it looked like nothing more than FFmpeg drawtext (v0.6, 2010) for watermarking, wrapped with Adobe’s c2patool and its WASM C2PA decoder.

There was no demo with the Sony Camera, probably not compatible.

bots don't cry @botsdontcry1.bsky.social · 14d

Open Source? 👍
Where is the repository?

bots don't cry @botsdontcry1.bsky.social · 14d

Open Source? 👍
Where is the repository?

bots don't cry @botsdontcry1.bsky.social · 15d

The #C2PA Watermarking Task Force (WTF) claims to have launched “the most robust and accessible content verification system ever deployed in a developing nation.”

- The watermark is removable with a single click.
- Desktop only, in a country where 80% of internet access happens on mobile.

This could not be verified as U.S. Embassy Guinea content.

1

bots don't cry @botsdontcry1.bsky.social · 15d

On the preceding day, the same event and stage featured a session sponsored by the Silicon Valley "Content Authenticity Initiative" @contentauth.bsky.social , whose members include Adobe, Google, Microsoft and OpenAI.

bsky.app/profile/bots...

Henry Ajder, AI advisor to the Content Authenticity Initiative, is on Adobe’s payroll.
Matt Day engages with UK policymakers to build awareness of Adobe CAI and Adobe C2PA standards as a solution to deepfakes, disinformation, and AI transparency.

1

bots don't cry @botsdontcry1.bsky.social · 19d

If is was only NIkon... BBC publishing a "verified" Fake, IPTC messing up metadata, Microsoft and Adobe signing everything

The new specs solve all the problems! said the C2PA Product Lead at Google.

For 2 days later removing from a blog post a C2PA signed image doxing his home location.

heise online @heiseonline.flipboard.com.ap.brid.gy · 19d

Photo news: Lessons learnt from the C2PA debacle
https://www.heise.de/en/news/Photo-news-Lessons-learnt-from-the-C2PA-debacle-10672949.html?utm_source=flipboard&utm_medium=activitypub

Posted into heise online in English @heise-online-in-english-heiseonline

Photo news: Lessons learnt from the C2PA debacle

The CAI/C2PA seal of authenticity loses credibility because Nikon has messed up a firmware. There is only one topic in our photo column this time.

www.heise.de

1 1

bots don't cry @botsdontcry1.bsky.social · 19d

LinkedIn! Because it shows that @contentauth.bsky.social Microsoft and Adobe only pay attention to AI labels when it’s about pleasing regulators or drafting their annual AI safety report.
bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Aug 31

The @LinkedIn @contentauth.bsky.social flagship #C2PA implementation gives no disclosure for AI-generated @adobe.com Adobe Stock #AIslop packeted for advertisers.

Does the Linkedin bots gives Lenovo a better ROI? That would explain this Slop2Bots marketing campaign.

bots don't cry @botsdontcry1.bsky.social · 24d

The EU AI Act’s Code of Practice allows multiple methods for tagging AI‑generated content.

IPTC’s “Digital Source Type”, used by Meta and Apple, matches C2PA’s AI provenance capabilities while working with widely supported tools, avoiding reliance on a fragile toolchain.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Sep 11

#C2PA is a wasteland:

"Open standard"? unreadable specs → non‑compliant results.
"Open source code"? guarded by @adobe.com → bloated & painful to debug.

Result:
#IPTC , the global standards body of the news media, fails compliance, and their Verify tool (@adobe.com) blesses forgeries.

bots don't cry @botsdontcry1.bsky.social · 27d

I got my hands on a old Sony ILME-FX30 with #C2PA support while browsing the 2025 IBC Show. Way cheaper than the PXW-Z300 if Sony decides to release the firmware 🤔. But Sony prefers to sell the PXW-Z300 as the "first" camera with #C2PA support.

1

bots don't cry @botsdontcry1.bsky.social · 27d

Yes, BBC is an "official" steering member but with no decision power. Project Origin now sits under IPTC, likely funded so Google and Adobe can push their own 'standards.' Meanwhile, #C2PA is "managed" by @linuxfoundation.org , giving Adobe cover to opensource‑wash its own code and specifications.

Source: https://www.eidr.org/assets/Preserving-Media-Provenance-Metadata-with-C2PA.pdf

1 2 2

bots don't cry @botsdontcry1.bsky.social · 27d

For AI companies, the mix of self‑regulation and vaporous product claims works well: the regulators get distracted.

Somehow BBC is profiting from being part of this "community": discount on Photoshop™ licenses probably.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Nov 23

🎉 Warm welcome to @contentauth.bsky.social on Bluesky! 🌟

The Content Authenticity Initiative, driven by Adobe and supported by tech titans Microsoft and OpenAI is a regulatory capture interest group for The AI tech industry.

Excited to see the change they can bring? 😊

1 1

bots don't cry @botsdontcry1.bsky.social · 29d

After excluding companies with a vested interest in avoiding AI regulation, the steering group consists of BBC, Publicis Groupe, and Sony. The BBC has not acknowledged its #C2PA pilot failure. Other mailing list members have no role in decision‑making: this arrangement is questionable for publishers

1

bots don't cry @botsdontcry1.bsky.social · 29d

Self-regulation paired with vaporware is a calculated tactic for the AI tech giants to protect their bottom line while avoiding regulators oversight.

bsky.app/profile/bots...

bots don't cry @botsdontcry1.bsky.social · Nov 23

🎉 Warm welcome to @contentauth.bsky.social on Bluesky! 🌟

The Content Authenticity Initiative, driven by Adobe and supported by tech titans Microsoft and OpenAI is a regulatory capture interest group for The AI tech industry.

Excited to see the change they can bring? 😊

1 1

bots don't cry @botsdontcry1.bsky.social · 29d

And there you have it, #C2PA certified crash!

Yet it wasn’t difficult: record the video at the set time and sign it with the good old @adobe.com @contentauth.bsky.social #C2PA software.

Adaptive streams? Nowhere to be found.
Metadata? Dumped like a CRT-TV.

www.franceinfo.fr/une-informat...