What the “GPS Timezone Triangle?” Row on a Forensic Report Actually Checks
Forensic reports flag GPS with a question, not a checkmark: “GPS timezone triangle?” Here’s what that question is actually asking, and what it means when the answer is no.
Why a Forensic Image Grade Needs Two Numbers, Not One
An F built on GPS coordinates and an F built on a texture statistic are not the same finding. One number cannot say both what was found and how much to trust it.
A Complete Guide to JPEG Forensic Analysis
Every JPEG carries six forensic signals beyond what you see in a photo viewer. This guide covers all of them and explains what they reveal in combination.
How to Forensically Detect AI-Generated Images — No Detection Model Required
Three methods now exist for identifying AI-generated images. Two of them fail when the creator says nothing. This article covers all three — and goes deep on the forensic signals that work regardless of what any label says.
Can you get metadata from a photo someone sent you?
Whether you can read metadata from a received photo depends on the channel, not the tool. Email and AirDrop pass the file unchanged. Messaging apps re-encode — EXIF is gone, but a compression signature takes its place.
The EXIF thumbnail that gave the edit away
JPEG, WebP, PNG, HEIC, AVIF, and camera RAW files embed a firmware-generated thumbnail before any editing software has touched them. When software re-saves the image without updating the thumbnail, the mismatch is forensic evidence — one of 60+ forensic checks snapWONDERS runs automatically on every photo and video.
MakerNote forensics: what camera manufacturers hide inside every photo
MakerNote is the manufacturer-written EXIF block that standard stripping tools typically leave intact — carrying lens serial numbers, shutter counts, burst UUIDs, and capture context that survives a standard privacy scrub. Its absence from a known device is equally revealing.
How to tell if a photo has been edited
How to tell if a photo has been edited: forensic analysis reads compression signatures, manufacturer metadata baselines, and thumbnail mismatches across JPEG, WebP, PNG, and video.
Your camera’s fingerprint survives EXIF stripping — here’s how
Stripping EXIF metadata doesn’t make a photo anonymous. DQT quantisation tables and Huffman coding tables are baked into the JPEG compression — a permanent camera fingerprint that survives every standard metadata strip. Two of the 60+ forensic checks snapWONDERS reads from every image.
How I built a JPEG encoder fingerprint database from scratch
How I built the DQT encoder fingerprint database inside snapWONDERS — deriving libjpeg tables mathematically from the ISO standard, and running a live accumulation pipeline with a trust model to guard against faked metadata. And what this has to do with Vaultify.
Why GPS in photos is more dangerous than most people think
A single geotagged photo shows where you were once. A few dozen shows where you live, work, and go every day — and most people are still sharing photos with full GPS data attached.
What your phone photos reveal about you — and why it matters
Every photo you take on your smartphone embeds a detailed record of where you were, what device you used, and exactly when — and most people have no idea how easy it is to read.
A new direction — deep digital media forensics
After some time away, the work is moving in a new direction. Hueyify has been paused. The story behind that is personal, and it’s told in full at kennethbspringer.au/our-story. The …