I am wanting some advice from jpeg photo experts. I know that taking a photograph, the date-taken is stored in the exif embedded in the jpeg. If one wanted to fabricate/fake the date-taken then he would need to copy the file to PC, use an editor to change it. The thing is you cannot change & keep the original file. It has to be saved as a NEW jpeg file because the exif metadata is embedded with the image (hence a 2nd recompression (& larger file size).
Now, that you know about exif metadata and it can be changed, is there any way in court by law on how to tell whether a jpeg file exif metadata has been faked? The file could easily be copied back onto the camera memory.
I guess the only way is to compare the file sizes of similar photo settings to the faked photo file.... to REAL photos taken by the camera (that are still stored in memory).
Anyway other ideas or technical know-how?
Now, that you know about exif metadata and it can be changed, is there any way in court by law on how to tell whether a jpeg file exif metadata has been faked? The file could easily be copied back onto the camera memory.
I guess the only way is to compare the file sizes of similar photo settings to the faked photo file.... to REAL photos taken by the camera (that are still stored in memory).
Anyway other ideas or technical know-how?