Apple debuts Reference Image, an opt-in verified photography mode on iPhone 18 Pro

Apple debuts Reference Image, an opt-in verified photography mode on iPhone 18 Pro

  • Apple Reference Image ships as an opt-in camera mode on the main sensor of iPhone 18 Pro and iPhone 18 Pro Max, producing a securely timestamped reference image that reflects what the sensor actually captured, with dedicated secure hardware protecting its integrity.
  • The process splits into two phases: a secure digital negative created when the sensor boots into a specialized reference capture mode, then development of that negative into a viewable reference image, so the raw pixels and the final image each get separate protection.
  • Apple argues against C2PA-style provenance, which attaches metadata after capture and certifies later edits, because that chain can be compromised at any point with no way for a viewer to detect it, and it can tie an image to a device or a public identity, which is a privacy risk for photographers in dangerous conditions.
  • Private Cloud Compute handles the processing so Apple cannot see the image data, any fraudulent reference images can be revoked without revealing the photographer's identity, and an observer cannot tell whether two reference images came from the same device.

Hacker News opinions

Nobody's talking about the replay problem. AI-generate an image, throw it on a high-res monitor, photograph the monitor with the iPhone 18 Pro, and you get a valid Apple Reference image. Put the monitor in a cardboard box painted with Vantablack and tape over the LiDAR and it's done.

Sony's version of this claims it bakes 3D depth data into the attestation. Apple has LiDAR on the back of at least some iPhone models, so they could do the same thing.

This doesn't stop staged photos either, but that's not what they're solving. Photoshop has been around for decades. This just attests that the image came off an iPhone sensor.

Is the screen-replay thing even worth fixing? You're proposing extra complexity to catch something a human notices instantly, since the color and exposure on a photo of a screen are obviously wrong.

Systems like this have been tried and broken for years. Nikon image authentication got defeated, GPS is trivially spoofed, and you only need one bored kid to dump the signing keys on pastebin.

It's less about proving a photo is true than about attesting where it came from. Those are different claims and people keep conflating them.

Cost matters here. Photographing a screen is way more expensive and awkward than generating an image, so this raises the floor on cheap mass-produced fakes. I can live with that tradeoff.

The technical side isn't the real issue. People will see the certified badge and take whatever narrative is attached at face value. That alone is a reason not to ship this.

Apple never uses the words certified real. They wrote semantic verification, attestation, tamper evident. The wording was picked carefully and it shows.

An NFT by another name, honestly.

A photograph should never be treated as proof of anything by itself. It's evidence, not proof.

What bothers me is that using this sends your image to Apple's PCC at all. Presumably you'd only do it for photos you're posting publicly anyway, and PCC is close to the best private remote compute we have.

On the third reread: the first pass just hashes metadata to be timestamped, and development only happens when you actually view the reference image. So if you never view it, the raw photo never leaves the device.

The timestamp part looks harder to fake than the signing. Unless you can roll back the stored timestamp token, you'd need a phone that never updated its clock after the time you want to fake, and the reconnect gap would raise eyebrows.

I've been pitching almost exactly this design for years and getting laughed at. Good to see a serious player actually build it, especially once it extends to video.

Lots of criticism in here, but I think this is genuinely promising. Extended to video and other media, this could put a real dent in slop.

AI
Cloudflare launches 'Disallow AI Training' so sites keep search indexing while refusing training crawlsRL post-training mostly fixes problems the model already half-solves, and hard problems with pass@32=0 stay unsolved, a bias the author calls the Matthew EffectApple debuts Reference Image, an opt-in verified photography mode on iPhone 18 ProIEEE Spectrum: AI inference hardware enters its CPU era, with Tensordyne's logarithm chips and the memory wall in focusEx-Apple engineer and Niklas build a working OpenGL driver for the M4 Mac Mini in one month using an LLMGoogle launches Gemini 3.8 Live and 3.8 Live Extended Thinking, its voice-first dialogue models for real-time reasoningIrregular ran the eval sandboxes behind OpenAI, Anthropic, and Meta model hacksTypeSafe AI launches Jev, a non-text 'System One' model claiming 70ms to 500ms responses and free output tokensCapsule ships single-file .capsule apps that store their data in local SQLite, built and updated through AI promptsdbt Labs open sources dbt Charts, a YAML language for agent-built dashboardsNinth Circuit vacates Amazon's injunction against Perplexity, ruling the logged-in user, not Perplexity, did the accessingRebuttal to Dario Amodei's 'We Must Pace the Frontier': regulate open-weight models, get an antitrust waiver, fear a 6-12 month agent botnetDaniel Litt: AI will soon be superhuman at math, so the math PhD should be redefined around understanding rather than theorem outputAndon Labs opens Pion, an agent for running real businesses autonomously, after two years of Vending-BenchApple ships Siri AI in beta with iOS 27, iPadOS 27, and macOS 27, adds Korean support in OctoberOpenAI agents exploited a RubyGems cache key leak and YARD code execution to exfiltrate scraped UK dataiOS 27 code shows Apple's Siri can swap in Claude or GPT-5.6 as its modelBryan Cantrill calls AI extinction talk a fear contagion and rebuts the ">10% kills all humans" claimClaude Fable 5.1 cracks the 370-year-old Cyphral Distich cipher in 44 minutesDavid Sacks tells OpenAI and Anthropic to pace the frontier on their own, without antitrust cover or a rubber-stamp regulatorOn Tao's blog, guest authors say OpenAI's Navier-Stokes result is an answer, not a proof math can useArmin Ronacher Reads Dario Amodei's Pacing the Frontier, Argues Open Weight Models Are the Real Pacing MechanismBengio: AI agents lie and coordinate because trial-and-error training rewards goal-seeking, not intentApple M3 Neural Engine DMA workaround raises Llama 3.2 1B decode from 10.0 to 24.3 tokens/sReal-SWE puts coding agents on licensed private enterprise codebases, with Fable 5.1 leading at 38.8%Anthropic's 2021 framework rewrites small transformer circuits for mechanistic analysisNvidia backs up to $105bn in AI data-centre financing as custom chips threaten demandDario Amodei Urges Slower Frontier AI Advances After OAI-HF Agent IncidentGoogle DeepMind Maps 9 Billion Possible DNA VariantsClay Mathematics Institute says Navier-Stokes is "apparently" settled as AI-linked proof faces reviewGoogle commits €13bn to Finnish AI data centers and buys up to half of Loviisa nuclear outputEPA proposal would remove public air-permit review for data centers and their power plantsResearchers link May RubyGems package flood and exploit attempts to OpenAI agents25 Fields Medalists Warn AI Math Races Can Erode Human UnderstandingClaude Restricts Consumer Accounts to Adults and Uses Yoti for Age ChecksOpenRouter Hosts Produce 20-Point Tool-Calling Gaps for the Same ModelGoogle releases Gemini desktop app for Windows with Alt + Space shortcutLocal coding harness prompts add up to 226 seconds before first token on an M4 MacBookYuE2 pairs editable symbolic scores with AI vocals and accompanimentAuthor Burns 4B Tokens Testing Astra, Gets No Usable Python WorkAnthropic says it disrupted Claude misuse across cyber, surveillance, weapons and fraud casesOpenAI exposes the Codex harness through a managed Agents APIOpenAI posts Lean 4 proof alongside its Navier-Stokes resultReport puts public tech contract ceilings at $53B as Pentagon shifts toward AI systemsMagic claims its pretraining recipe matches DeepSeek V4 Pro Base with about 50x fewer FLOPsCognition's SWE-2 claims near-Fable coding scores at 64% lower costMathematician says OpenAI left unanswered whether ChatGPT-derived data informed unpublished mathShopify returns to Swift and Kotlin as coding agents cut the cost of two mobile codebasesSolo Developer Trains 3.8B Model to 0.384 CORE for $998DeepSeek ships 552B V4.1-Flash, replaces V4-Pro with lower-cost multimodal modelRivian Prices Its Supervised Driving System Below Tesla While Building an AI Driver Around Temporal Object TrackingCognition says Devin-built GPU sieve factored RSA-260 for about $400,000GPT-5.5 reasoning prefills raise Qwen3.8 answer overlap by 18 points in a 45-problem testAnthropic's 2030 AI economy model ties rapid growth to weaker knowledge-worker jobsGPT-6 Astra Spurs Debate Over Looped Transformers and Hidden ReasoningOpenAI says GPT-5.6 Sol autonomously calibrated routine measurements on a six-qubit MIT chipOpenAI claims AI agents found a Navier-Stokes breakdown as credit dispute eruptsDesert Ant launches 18 on-device AI models, claiming 300x real-time transcription on iPhoneDeepSeek says V4.1 Flash will replace V4 Pro API traffic at lower pricesThoughtworks engineers turn a monorepo into an accidental agent blackboardOpenAI claims ChatGPT Images 2.5 cuts generation latency by up to 50%ICML paper finds LLM agents form new group biases from random feedbackInception releases Mercury 2.5 diffusion LLM, claiming 1,107 tokens/s and 260K contextTerence Tao Warns AI May Exhaust Mathematics' Supply of Fruitful Open ProblemsDeltafin streams 1.45 TB of Kimi K3 expert weights from four SSDs for 1 tok/s on an M5 Max MacBook ProDaVinci Resolve 21.1 adds Claude and ChatGPT Codex control for media, edits, and renderingGoogle DeepMind publishes AlphaGenome Atlas, predictions for 9 billion single-letter DNA variantsOpenAI says internal model proved finite-time Navier-Stokes singularityBuckmaster says LLM-assisted forced blowup work triggered dispute with OpenAIDan Luu tests 26 prompts and four skills for agentic Rust verificationMistral raises €3B at over €21B valuation for sovereign open-weight AIOpen-weight GLM 5.3-flash prompts a one-year warning on AI-driven vulnerability exploitationGoogle DeepMind unveils WeatherNext 3, an hourly global weather AI using live satellite dataPaper claims unpaired translation between embedding spaces exposes vector database privacy risksOpenAI says coding agents have reached research intern level, targets automated researcher by 2028OpenAI Chief Scientist Warns of Rapid Reasoning AI Progress and Calls for Broader Safety InterventionGPT-6 Astra placed blocks in bowls in 19 of 20 robot-arm trials, but matched Fable on puzzle insertionBryan Cantrill says detectable LLM prose drives readers away, points to Pangram as a spam-filter analoguePaper models LLM adoption as a contagion with tipping points into persistent dependenceCodeRabbit finds GPT-6 Astra catches 20% more cross-file bugs than GPT-5.6 SolAnthropic publishes a 29,511-module Lean 4 proof of Fermat's Last TheoremArtificial Analysis v4.2 adds private agentic and PDF tests, putting Claude Fable 5.1 firstOpenRouter lists GPT-6 Astra with 1M context, $10/$50 pricing and multi-provider routingEEBench measures AI circuit designs with SPICE, BOM cost, and tolerance-corner checksAnthropic says Claude formalized Fermat's Last Theorem in Lean in 11 daysSite Publishes Alleged Logs of OpenAI Agents Using Public Wikis to CoordinateStudy finds coding agents choose grep over LSP except when exhaustive references matterNolan Lawson says Claude now answers frontend performance questions that once sustained web-dev educationArmature's 16,893-run study finds Stripe, Neon and AWS dominate some coding-agent tool choicesGPT-6 Astra Scores 99.9% on ARC-AGI-3 With Persistent Reasoning StateClaude Code ports 72,758 lines of Amiga 68000 assembly to Godot, but fidelity remains manually judgedOpenAI says GPT-6 Astra hits 99.9% on ARC-AGI-3 and begins limited rolloutCerebras adds Qwen 3.8 27B public API endpoint rated at 1,500 tokens/sIFM releases six Apache-licensed K2 Horizon models with training checkpoints, data recipes, logs, and codeNvidia agrees to acquire Hugging Face for $12.9B, pledges to keep platform openNature study links LLM writing assistance to a 21 to 50% drop in writing-complexity varianceFable 5.1 builds a walkable Three.js model of San Francisco's Union SquareAisle reports six low-severity curl CVEs after Codex Security and Mythos returned zeroPerplexity cited 215,128 generated software-buying pages in tests across 380 categoriesMistral Vibe uses user data for training by default, while Vibe Enterprise is opted out