How Photo Steganography Actually Works
Vaultify uses an AI model to decide how much of a photo can hide data invisibly, then encrypts before embedding it — from the person who built it.
Founder of snapWONDERS and builder of Vaultify — a digital media forensics platform. Working in metadata analysis, JPEG encoder fingerprinting, steganography detection, GPS triangulation, manipulation detection, and privacy. Senior full-stack developer & Tech Lead with 20+ years' experience across telco, banking, and health technology.
https://kennethbspringer.auVaultify uses an AI model to decide how much of a photo can hide data invisibly, then encrypts before embedding it — from the person who built it.
How statistical steganalysis actually detects hidden data in images — RS analysis, chi-square testing, and why “undetectable” is a claim no steganography tool should make.
AI tools increasingly sign what they create, and editing the file rarely erases it. How C2PA content credentials work, who’s using them, and where LinkedIn fits in.
Every JPEG carries six forensic signals beyond what you see in a photo viewer. This guide covers all of them and explains what they reveal in combination.
Three methods now exist for identifying AI-generated images. Two of them fail when the creator says nothing. This article covers all three — and goes deep on the forensic signals that work regardless of what any label says.
Whether you can read metadata from a received photo depends on the channel, not the tool. Email and AirDrop pass the file unchanged. Messaging apps re-encode — EXIF is gone, but a compression signature takes its place.
JPEG, WebP, PNG, HEIC, AVIF, and camera RAW files embed a firmware-generated thumbnail before any editing software has touched them. When software re-saves the image without updating the thumbnail, the mismatch is forensic evidence — one of 60+ forensic checks snapWONDERS runs automatically on every photo and video.
MakerNote is the manufacturer-written EXIF block that standard stripping tools typically leave intact — carrying lens serial numbers, shutter counts, burst UUIDs, and capture context that survives a standard privacy scrub. Its absence from a known device is equally revealing.
How to tell if a photo has been edited: forensic analysis reads compression signatures, manufacturer metadata baselines, and thumbnail mismatches across JPEG, WebP, PNG, and video.
Stripping EXIF metadata doesn’t make a photo anonymous. DQT quantisation tables and Huffman coding tables are baked into the JPEG compression — a permanent camera fingerprint that survives every standard metadata strip. Two of the 60+ forensic checks snapWONDERS reads from every image.
How I built the DQT encoder fingerprint database inside snapWONDERS — deriving libjpeg tables mathematically from the ISO standard, and running a live accumulation pipeline with a trust model to guard against faked metadata. And what this has to do with Vaultify.
The story behind Vaultify — a father building a steganography platform in memory of his son Huey, who lost his sight at four and dreamed of photos that carry hidden stories.
snapWONDERS has launched Vaultify, an AI-powered platform that invisibly hides files inside photos and videos, honouring the memory of Huey. This innovative idea originated from their earlier work on AI-enhanced …
A single geotagged photo shows where you were once. A few dozen shows where you live, work, and go every day — and most people are still sharing photos with full GPS data attached.
Every photo you take on your smartphone embeds a detailed record of where you were, what device you used, and exactly when — and most people have no idea how easy it is to read.
How to configure RSPAMD for instant email and domain blacklisting — setting up regex multimap rules, a Docker-compatible block script, and why blocking at the mail server level matters more than client-side filtering.
A practical guide to DNS configuration across IPv4 and IPv6 — how they interact, which takes precedence on Windows 11 and Linux, and how to set up DNSMasq with a floating virtual IP for reliable dual-stack resolution on a self-hosted infrastructure.
If you host a website, chances are you’re always vigilant about ensuring its security and protecting it from vulnerabilities. Even with exhaustive measures in place to bolster website security, the …
Recently I wrote an article on why you should lock down your website certificates. Oddly, has been around since late 2013 and not very well know, although recently has been …
These days I’ve been busy on my latest project at snapWONDERS focused on our latest research development with AI and image processing. AI has the remarkable potential to enhance existing …
I must say it is pretty exciting with the Linux based open source solutions that are directed at solving Email Services problems: aka – SMTP + IMAP + POP3 + …
Yay! Just completed the PHP client to integrate with the snapWONDERS API. PHP is my preferred development language for build Websites and didn’t take long to build the bear minimum …
These days am busy with coding client examples for integrating to the snapWONDERS offerings over Restful APIs. All examples are using VisualCode with a step-by-step on how to set up …
Pushing ahead with the development on various clients to integration with the snapWONDERS API in different programming languages we just finished Python. Python is a special programming language as my …
At last the opportunity came for it where we would need an example C# client to integrate with the snapWONDERS API. This isn’t too very different than the Go example …
These days I’ve been having fun learning Golang (Go) to build a client application in Go to integrate with the snapWONDERS API. I found Go very easy to setup in …
I must say I am pretty excited about our latest achievement at snapWONDERS to final release the OpenAPI Specification on our offerings. Since our launch we’ve had several request for …
OpenAPI v3 is awesome compared to v2. It provides standards for how software programs communicate with each other. OpenAPI has many benefits, including clear documentation, language-agnosticism, and wide adoption, which …
By the lack of updates to this blog, one would think that I’ve been MIA. Truthfully, I’ve been deeply embroiled with the next project delivery for snapWONDERS.com and has been …
We’re excited to launch our new updated website which was formerly located at kennethbspringer.com.au. It’s been a long while since we had last updated the kennethbspringer.au website and wanted to …
