this post was submitted on 12 Sep 2025
167 points (98.8% liked)

Privacy

41827 readers
1625 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
k_o_t@lemmy.ml
tmpod@lemmy.pt
Yayannick@lemmy.ml
ranok@sopuli.xyz
167
Every lens leaves a blur signature—a hidden fingerprint in every photo; With it, we can tell apart ‘identical’ phones by their optics, deblur images, and render realistic blurs. (blur-fields.github.io)
submitted 5 days ago by Pro@programming.dev to c/privacy@lemmy.ml
34 comments fedilink hide all child comments
 

cross-posted from: https://programming.dev/post/37278389

Optical blur is an inherent property of any lens system and is challenging to model in modern cameras because of their complex optical elements. To tackle this challenge, we introduce a high‑dimensional neural representation of blur—the lens blur field—and a practical method for acquisition.

The lens blur field is a multilayer perceptron (MLP) designed to (1) accurately capture variations of the lens 2‑D point spread function over image‑plane location, focus setting, and optionally depth; and (2) represent these variations parametrically as a single, sensor‑specific function. The representation models the combined effects of defocus, diffraction, aberration, and accounts for sensor features such as pixel color filters and pixel‑specific micro‑lenses.

We provide a first‑of‑its‑kind dataset of 5‑D blur fields—for smartphone cameras, camera bodies equipped with a variety of lenses, etc. Finally, we show that acquired 5‑D blur fields are expressive and accurate enough to reveal, for the first time, differences in optical behavior of smartphone devices of the same make and model.

top 34 comments
sorted by: hot top controversial new old
[–] sefra1@lemmy.zip 44 points 5 days ago* (last edited 5 days ago) (4 children)

It's old news that you should never use the same camera for two images that need separate identities.

The same applies to radio transmitters and every analogue medium like probably microphone or preamp or ADC.

Anything that doesn't work on purely digital domain is most likely traceable and I wouldn't be surprised if proprietary software like Adobe started embedding hidden fingerprints into their files to "enforce their copyright" or "better collaborate with law enforcement"

I tend to complain that ROMs like Graphene OS don't allow spoofing IMEI which should be basic functionally of every privacy-enabled phone. Yet if you require real privacy the electronic "fingerprint" of the radio itself is probably enough to track someone if they really want to.

There's also a thing where they can track someone's time and location just from listening to oscillations on the utility power's frequency

[–] pupbiru@aussie.zone 5 points 4 days ago

The same applies to radio transmitters and every analogue medium like probably microphone or preamp or ADC.

exactly why when you buy any halfway decent mic there’s the option to buy them in sets: they’ll have come off the production line together so that their imperfections are as close to each other as possible so that they sound as identical as they can be

[–] LesserAbe@lemmy.world 5 points 5 days ago

It's news to me. Do you have any further reading about it you can share?

[–] irmadlad@lemmy.world 6 points 5 days ago (1 children)

It’s old news that you should never use the same camera for two images that need separate identities.

Sanatize metadata and Exif data?

[–] sefra1@lemmy.zip 17 points 5 days ago

That's probably enough to stop your online mates from doxing you, but a powerful enough adversary can trace the little unique nuanced fingerprints that a camara lens introduces to the picture, and compare it with images from other sources like social media.

There are are many steps that can introduce patterns, like the way the lens blurs as explained in the article, sensor readout noise patterns, a speckle of dust, scratches, I bet chromatic aberrations are probably also different between multiple copies of the lens.

[–] Mgineer@lemmy.ml 2 points 4 days ago

Anything that doesn't work on purely digital domain is most likely traceable

at this point I believe that digital is easier to trace as every device ever connected to the Internet or connected to a device that has, has probably been bugged

[–] icelimit@lemmy.ml 20 points 5 days ago* (last edited 5 days ago) (1 children)

This blur persists past digital (automatic) post processing? Or is otherwise still uniquely traceable?

[–] pupbiru@aussie.zone 6 points 4 days ago* (last edited 4 days ago)

i’d guess that the digital processing is a well known change so you can account for it

after all, modern post processing on a phone afaik is done in the raw sensor data, so is using a lot more data than is actually stored in the JPEG: it probably leads to more information being available than if it weren’t done (more shadow detail rather than crushed blacks, etc)

[–] CookieOfFortune@lemmy.world 11 points 5 days ago (1 children)

That means we could get better processing by applying this analysis in reverse. Would also reduce this type of fingerprinting.

[–] Eagle0110@lemmy.world 3 points 4 days ago (1 children)

Uhhh I feel like reversing this wouldn't be much easier than trying to reverse hash functions lol

[–] CookieOfFortune@lemmy.world 4 points 4 days ago

We already apply distortion correction based on lens profiles. Probably all cell phone lenses do this. They just aren’t corrected based on individual phones.

[–] hellfire103@lemmy.ca 16 points 5 days ago (1 children)

This was mentioned in Little Brother by Cory Doctorow. So, what do we do about it?

[–] interdimensionalmeme@lemmy.ml 49 points 5 days ago

Have a coordinated volunteer project where people print and photograph special patterned image designed to map the blur and other aberration of their particular lens. With hundreds of thousands of sample, we train a micro-distortion ML model that subtly shifts and distorts the pixels just enough to make positive lens identification impossible. Then have something to auto-apply this filter (and discard originals) on every pictures before they even have a chance of being uploaded to the cloud.

[–] communism@lemmy.ml 4 points 5 days ago (1 children)

Is it possible to use some kind of random noise algorithm to modify the image so that devices can't be uniquely identified like this anymore? Or would that not work?

[–] interdimensionalmeme@lemmy.ml 7 points 5 days ago (1 children)

The would have to be enough to obscure the lens' aberration, that would be an obnoxious amount of noise. Instead I think a better solution is to add micro distortion strategically to make identification ambiguous/inconclusive

[–] pupbiru@aussie.zone 4 points 4 days ago (1 children)

perhaps simply putting something like cling wrap over the lens and moving it for each photo would be enough: adding some scratches and roughness that slightly changes each time you move it

[–] interdimensionalmeme@lemmy.ml 1 points 3 days ago

Some parts of the image would not be changed enough, and like a partial fingerprint they could still be traced, the entire image has to be micro-distorted digitally to thoroughly jumble up the microblur image signature.

The sensor also has a unique "grain" structure and that has to be dispelled

[–] Core_of_Arden@lemmy.ml 5 points 5 days ago

Everything leaves behind a unique pattern.

[–] webghost0101@sopuli.xyz 5 points 5 days ago (1 children)

As much as this can be a privacy issue couldn’t this be a feature to tell apart ai and real photos?

[–] Ross_audio@lemmy.world 11 points 5 days ago (2 children)

Just my guess. I could be wrong:

As the lens blur is mathematically fairly simple and spread across the whole image it's likely already consistently replicated by AI in a similar way to real photos.

It's easier for generative AI to spot, "understand", and replicate a mathematical pattern than the number of fingers on a hand or limbs on a body.

[–] webghost0101@sopuli.xyz 5 points 5 days ago* (last edited 5 days ago) (2 children)

Also a guess, isn’t a hand or any biological form not also the result of a mathematical pattern?

I do see how ai could replicate “a” blur but what it might not be able to do (yet) is replicate the unique blur of a specific device.

So maybe you couldn’t proof something is AI, but the physical lens as proof that it is not.

[–] Ross_audio@lemmy.world 5 points 5 days ago

Hands appear differently in different positions all over the frame in the photo so I maintain the hand pattern is less consistent and harder than lens blur.

But you're right as the blur is a fingerprint you can match it to a lens and prove a photo is real that way.

It could be a useful tactic as much of AI detection is a way to find and prove AI fake so far.

[–] aashd123@feddit.nl 3 points 4 days ago

You wouldn't share your physical lens for high-risk work (i.e. where you are anonymous) and since there's no way to know whether a specific "blur" was produced by a physical lens or by AI, this won't help in proving if something is AI.

[–] howrar@lemmy.ca 2 points 4 days ago

It also helps that the current generation of image generation models essentially work by "deblurring" some random noise. Having a blur in the resulting image just means the model has to do less work in a sense.

[–] asbestos@lemmy.world 3 points 5 days ago

Splendid

[–] Endymion_Mallorn@kbin.melroy.org 1 points 5 days ago (1 children)

So you're saying, always 'scratch' your lens and get a repair shop to replace it with a generic lens. And if possible, get the CCD changed to a compatible one as well.

[–] lime@feddit.nu 24 points 5 days ago (1 children)

...for every photo

[–] Endymion_Mallorn@kbin.melroy.org 2 points 5 days ago (2 children)

That's a challenge, but even moving to a "generic" lens should help to reduce the identifiability.

[–] CookieOfFortune@lemmy.world 9 points 5 days ago (1 children)

Why would a generic lens be any better? These distortions are part of the lens design and manufacturing. Arguably, a lower quality lens would be easier to identify.

[–] Endymion_Mallorn@kbin.melroy.org 2 points 5 days ago (2 children)

But not identifiable to a specific type of phone.

[–] porous_grey_matter@lemmy.ml 6 points 5 days ago

I didn't see anything to see that these aberrations indicated anything about a type of phone? They're unique for each lens...

[–] CookieOfFortune@lemmy.world 3 points 5 days ago (1 children)

Ah I see. Do non phone specific generic lenses exist? They all seem pretty specialized to me.

[–] Endymion_Mallorn@kbin.melroy.org 1 points 4 days ago

I know that a lot of the cheap Android handsets, which we mostly encounter as prepaid, have interchangeable camera bits.

[–] lime@feddit.nu 1 points 3 days ago

but the problem isn't "we can tell this photo is from a specific phone", it's "we can tell these two photos are from the same phone".