A Complete Guide to JPEG Forensic Analysis
Every JPEG carries six forensic signals beyond what you see in a photo viewer. This guide covers all of them and explains what they reveal in combination.
How to Forensically Detect AI-Generated Images — No Detection Model Required
Three methods now exist for identifying AI-generated images. Two of them fail when the creator says nothing. This article covers all three — and goes deep on the forensic signals that work regardless of what any label says.
Can you get metadata from a photo someone sent you?
Whether you can read metadata from a received photo depends on the channel, not the tool. Email and AirDrop pass the file unchanged. Messaging apps re-encode — EXIF is gone, but a compression signature takes its place.
The EXIF thumbnail that gave the edit away
JPEG, WebP, PNG, HEIC, AVIF, and camera RAW files embed a firmware-generated thumbnail before any editing software has touched them. When software re-saves the image without updating the thumbnail, the mismatch is forensic evidence — one of 60+ forensic checks snapWONDERS runs automatically on every photo and video.
MakerNote forensics: what camera manufacturers hide inside every photo
MakerNote is the manufacturer-written EXIF block that standard stripping tools typically leave intact — carrying lens serial numbers, shutter counts, burst UUIDs, and capture context that survives a standard privacy scrub. Its absence from a known device is equally revealing.
How to tell if a photo has been edited
How to tell if a photo has been edited: forensic analysis reads compression signatures, manufacturer metadata baselines, and thumbnail mismatches across JPEG, WebP, PNG, and video.
Your camera’s fingerprint survives EXIF stripping — here’s how
Stripping EXIF metadata doesn’t make a photo anonymous. DQT quantisation tables and Huffman coding tables are baked into the JPEG compression — a permanent camera fingerprint that survives every standard metadata strip. Two of the 60+ forensic checks snapWONDERS reads from every image.
How I built a JPEG encoder fingerprint database from scratch
How I built the DQT encoder fingerprint database inside snapWONDERS — deriving libjpeg tables mathematically from the ISO standard, and running a live accumulation pipeline with a trust model to guard against faked metadata. And what this has to do with Vaultify.
Huey’s vision — and the decade of work to honour it
The story behind Vaultify — a father building a steganography platform in memory of his son Huey, who lost his sight at four and dreamed of photos that carry hidden stories.
Why GPS in photos is more dangerous than most people think
A single geotagged photo shows where you were once. A few dozen shows where you live, work, and go every day — and most people are still sharing photos with full GPS data attached.
What your phone photos reveal about you — and why it matters
Every photo you take on your smartphone embeds a detailed record of where you were, what device you used, and exactly when — and most people have no idea how easy it is to read.
Blocking Email Spam Faster with RSPAMD — Instant Domain Blacklisting
How to configure RSPAMD for instant email and domain blacklisting — setting up regex multimap rules, a Docker-compatible block script, and why blocking at the mail server level matters more than client-side filtering.
IPv4 vs IPv6 DNS: Which Takes Precedence and How to Configure Both
A practical guide to DNS configuration across IPv4 and IPv6 — how they interact, which takes precedence on Windows 11 and Linux, and how to set up DNSMasq with a floating virtual IP for reliable dual-stack resolution on a self-hosted infrastructure.
Why you need a Website Vulnerability Disclosure Policy
If you host a website, chances are you’re always vigilant about ensuring its security and protecting it from vulnerabilities. Even with exhaustive measures in place to bolster website security, the …
Time to lock down Website Certificates
Recently I wrote an article on why you should lock down your website certificates. Oddly, has been around since late 2013 and not very well know, although recently has been …
Revolutionising Image Compression: AI Enhancing WebP and JPEG with Human-Eye Perception
These days I’ve been busy on my latest project at snapWONDERS focused on our latest research development with AI and image processing. AI has the remarkable potential to enhance existing …
Linux Email Services
I must say it is pretty exciting with the Linux based open source solutions that are directed at solving Email Services problems: aka – SMTP + IMAP + POP3 + …
Yay! Completed PHP client to integrate with the snapWONDERS API
Yay! Just completed the PHP client to integrate with the snapWONDERS API. PHP is my preferred development language for build Websites and didn’t take long to build the bear minimum …
Busy coding API integrations in C++, PHP, TypeScript and JavaScript
These days am busy with coding client examples for integrating to the snapWONDERS offerings over Restful APIs. All examples are using VisualCode with a step-by-step on how to set up …
Python client to integrate with the snapWONDERS API
Pushing ahead with the development on various clients to integration with the snapWONDERS API in different programming languages we just finished Python. Python is a special programming language as my …
C# (CSharp) client to integrate with the snapWONDERS API
At last the opportunity came for it where we would need an example C# client to integrate with the snapWONDERS API. This isn’t too very different than the Go example …
Golang (Go) client to integrate with the snapWONDERS API
These days I’ve been having fun learning Golang (Go) to build a client application in Go to integrate with the snapWONDERS API. I found Go very easy to setup in …
snapWONDERS OpenAPI Specification
I must say I am pretty excited about our latest achievement at snapWONDERS to final release the OpenAPI Specification on our offerings. Since our launch we’ve had several request for …
OpenAPI v3.1.0 – Awesome!
OpenAPI v3 is awesome compared to v2. It provides standards for how software programs communicate with each other. OpenAPI has many benefits, including clear documentation, language-agnosticism, and wide adoption, which …
Missing in Action – Not!
By the lack of updates to this blog, one would think that I’ve been MIA. Truthfully, I’ve been deeply embroiled with the next project delivery for snapWONDERS.com and has been …
Just updated our Website
We’re excited to launch our new updated website which was formerly located at kennethbspringer.com.au. It’s been a long while since we had last updated the kennethbspringer.au website and wanted to …
A new direction — deep digital media forensics
After some time away, the work is moving in a new direction. Hueyify has been paused. The story behind that is personal, and it’s told in full at kennethbspringer.au/our-story. The …
Hueyify listed in the Australian anthill SMART 100
Hueyify has been listed in the Australian anthill SMART 100 — an annual index recognising Australia’s 100 most innovative products and services. Hueyify is an accessibility platform that transforms how …
A patent filed, and a competition won — Hueyify earns international recognition
Two milestones worth recording. An international patent application has been filed for the Hueyify technology — PCT/AU2016/050860, “System and Method for Providing a Personalised Reactive Web Experience.” In plain language: …