Fake fabricate JPEG date created

[andwan0]

I am wanting some advice from jpeg photo experts. I know that taking a photograph, the date-taken is stored in the exif embedded in the jpeg. If one wanted to fabricate/fake the date-taken then he would need to copy the file to PC, use an editor to change it. The thing is you cannot change & keep the original file. It has to be saved as a NEW jpeg file because the exif metadata is embedded with the image (hence a 2nd recompression (& larger file size).

Now, that you know about exif metadata and it can be changed, is there any way in court by law on how to tell whether a jpeg file exif metadata has been faked? The file could easily be copied back onto the camera memory.

I guess the only way is to compare the file sizes of similar photo settings to the faked photo file.... to REAL photos taken by the camera (that are still stored in memory).

Anyway other ideas or technical know-how?

[TPF Sponsor]

[dl4449]

Why ??

[leighthal]

ditto.....why would this ever be necessary? The only reason that comes to mind is nefarious ones.

[CW Jones]

I feel like something illegal is going on..... why would it matter if a court could tell if the metadata was fake? I hardly believe anyone on here will bite and help in illegal activity....

[MikeBcos]

You can do whatever you like to the Exif data, the original file creation date is written into the file system, the Exif data is just a more readable addition to that data. You can edit and save as a copy as many times as you like, the creation date of the original file, last edited date (and that includes editing the Exif data) and last access date are embedded wthin the file itself and cannot be altered.

[O|||||||O]

There is a system out there that will hold up in court but I can't remember what it's called or who makes it.
(All I can remember is that it's very expensive.)

If you're trying to fake some exif for a case you're involved in somehow, I wouldn't do it.

[mrodgers]

Why is everyone jumping on this as if the OP is doing something illegal? Perhaps he is asking because he is on the opposite side of the illegal and is trying to figure out if someone else could have done the illegal to him.

Jumping to conclusions before having the story here.....

[beni_hung]

Giving the benefit of the doubt is good, but even if he is looking for info to defend himself then the defense lawyer should be able to ask a local professional that could show up and hold up in court. Like a college professor for instance.

[CW Jones]

Why is everyone jumping on this as if the OP is doing something illegal? Perhaps he is asking because he is on the opposite side of the illegal and is trying to figure out if someone else could have done the illegal to him.

Jumping to conclusions before having the story here.....

first post on a forum is asking how to alter data?? If he comes back and explains WHY the data needs to be altered.... then I will take my conclusion back... until then its sketchy and seems very illegal.

EDIT:
after re-reading it a few times... he doesn't seem to be asking HOW to do it but more is there a way to tell.... I hope the OP comes back and spreads some more light on the situation....

[andwan0]

Thanks, yes, found Exifer for Windows & PhotoME - Exif, IPTC & ICC Metadata Editor & AmoK Exif Sorter 2.52 (Official Website) & ExifTool by Phil Harvey (all recommended by EXIF guru Friedemann Schmidt). Found that the date created in EXIF can be modified solely, leaving the rest of the binary data intact, unaltered.

I am the defendant. The claimant submitted a document with 1 picture... to accuse about a time/date of an event from the picture alone. I was curious whether we can request for the original jpeg file and get professional experts to retrieve the date from the EXIF. Then I find out that the EXIF date can easily be modified. I just wanted to experiement and try to find anyway to know if the EXIF has been modified. From my experiement, there's no way knowing.....

[Garbz]

Not knowing where you are or what you are doing, but I can tell you a JPEG will not hold up in a court here in Australia, unless it was like a photo of a person standing next to a clock or something. EXIF data and even timestamps are easily modified.

There are systems in place to take photos of documents with proof including features on Nikon D200s and up which fingerprint the original RAW file so it can be seen if it has been altered in any way since it was taken with the camera.