Why a Forensic Image Grade Needs Two Numbers, Not One
An F built on GPS coordinates and an F built on a texture statistic are not the same finding. One number cannot say both what was found and how much to trust it.
How a Corrected Rule Stays Corrected
An AI assistant can diagnose its own repeated logic mistake perfectly, yet keep making it. What actually stopped the loop wasn’t a better prompt.
I Couldn’t Use Google’s reCAPTCHA — So I Built My Own Bot Challenge for Clearnet, Tor, and I2P
Every mainstream bot defence needs to fingerprint your browser or phone home to a third party. We needed one mechanism that works the same on clearnet, Tor, and I2P — here’s the incident that forced the question and what we built instead.
AI-Assisted Development vs the Old Outsourcing Model
Everyone’s sharing AI coding horror stories. Here’s a contrarian data point from someone who outsourced dev work before AI, and builds with it now.
I audited a real open-source steganography tool. Here’s every mistake it made
I audited a real open-source steganography tool’s source. Three mistakes — and the worst one needs no password and no statistics, just knowing where to look.
Why I Built Official SDKs for the snapWONDERS API
Several developers reaching out to integrate the snapWONDERS API kept surfacing the same nuance: the file upload step. Here’s why I built official Python, JavaScript, PHP and Go SDKs to fix it.
Building steganography detection: what statistical analysis looks for
How statistical steganalysis actually detects hidden data in images — RS analysis, chi-square testing, and why “undetectable” is a claim no steganography tool should make.
Think Twice Before Claiming AI Work as Your Own — What C2PA Content Credentials Prove
AI tools increasingly sign what they create, and editing the file rarely erases it. How C2PA content credentials work, who’s using them, and where LinkedIn fits in.
A Complete Guide to JPEG Forensic Analysis
Every JPEG carries six forensic signals beyond what you see in a photo viewer. This guide covers all of them and explains what they reveal in combination.
How to Forensically Detect AI-Generated Images — No Detection Model Required
Three methods now exist for identifying AI-generated images. Two of them fail when the creator says nothing. This article covers all three — and goes deep on the forensic signals that work regardless of what any label says.
Can you get metadata from a photo someone sent you?
Whether you can read metadata from a received photo depends on the channel, not the tool. Email and AirDrop pass the file unchanged. Messaging apps re-encode — EXIF is gone, but a compression signature takes its place.
The EXIF thumbnail that gave the edit away
JPEG, WebP, PNG, HEIC, AVIF, and camera RAW files embed a firmware-generated thumbnail before any editing software has touched them. When software re-saves the image without updating the thumbnail, the mismatch is forensic evidence — one of 60+ forensic checks snapWONDERS runs automatically on every photo and video.
MakerNote forensics: what camera manufacturers hide inside every photo
MakerNote is the manufacturer-written EXIF block that standard stripping tools typically leave intact — carrying lens serial numbers, shutter counts, burst UUIDs, and capture context that survives a standard privacy scrub. Its absence from a known device is equally revealing.
How to tell if a photo has been edited
How to tell if a photo has been edited: forensic analysis reads compression signatures, manufacturer metadata baselines, and thumbnail mismatches across JPEG, WebP, PNG, and video.
Your camera’s fingerprint survives EXIF stripping — here’s how
Stripping EXIF metadata doesn’t make a photo anonymous. DQT quantisation tables and Huffman coding tables are baked into the JPEG compression — a permanent camera fingerprint that survives every standard metadata strip. Two of the 60+ forensic checks snapWONDERS reads from every image.
How I built a JPEG encoder fingerprint database from scratch
How I built the DQT encoder fingerprint database inside snapWONDERS — deriving libjpeg tables mathematically from the ISO standard, and running a live accumulation pipeline with a trust model to guard against faked metadata. And what this has to do with Vaultify.
Huey’s vision — and the decade of work to honour it
The story behind Vaultify — a father building a steganography platform in memory of his son Huey, who lost his sight at four and dreamed of photos that carry hidden stories.
Why GPS in photos is more dangerous than most people think
A single geotagged photo shows where you were once. A few dozen shows where you live, work, and go every day — and most people are still sharing photos with full GPS data attached.
What your phone photos reveal about you — and why it matters
Every photo you take on your smartphone embeds a detailed record of where you were, what device you used, and exactly when — and most people have no idea how easy it is to read.
Blocking Email Spam Faster with RSPAMD — Instant Domain Blacklisting
How to configure RSPAMD for instant email and domain blacklisting — setting up regex multimap rules, a Docker-compatible block script, and why blocking at the mail server level matters more than client-side filtering.
IPv4 vs IPv6 DNS: Which Takes Precedence and How to Configure Both
A practical guide to DNS configuration across IPv4 and IPv6 — how they interact, which takes precedence on Windows 11 and Linux, and how to set up DNSMasq with a floating virtual IP for reliable dual-stack resolution on a self-hosted infrastructure.
Why you need a Website Vulnerability Disclosure Policy
If you host a website, chances are you’re always vigilant about ensuring its security and protecting it from vulnerabilities. Even with exhaustive measures in place to bolster website security, the …
Time to lock down Website Certificates
Recently I wrote an article on why you should lock down your website certificates. Oddly, has been around since late 2013 and not very well know, although recently has been …
Revolutionising Image Compression: AI Enhancing WebP and JPEG with Human-Eye Perception
These days I’ve been busy on my latest project at snapWONDERS focused on our latest research development with AI and image processing. AI has the remarkable potential to enhance existing …
Linux Email Services
I must say it is pretty exciting with the Linux based open source solutions that are directed at solving Email Services problems: aka – SMTP + IMAP + POP3 + …
Yay! Completed PHP client to integrate with the snapWONDERS API
Updated 8 August 2026: The contents of this article may be outdated. snapWONDERS now publishes official, actively maintained SDKs for Python, JavaScript/TypeScript, PHP and Go — see the developers hub, …
Busy coding API integrations in C++, PHP, TypeScript and JavaScript
Updated 8 August 2026: The contents of this article may be outdated. snapWONDERS now publishes official, actively maintained SDKs for Python, JavaScript/TypeScript, PHP and Go — see the developers hub, …