JPEG – The Gory Details – Part 2 – File Contents

Okay time for a HEX dump of the jpeg file. I believe that the analysis shows that the JPEG was compressed with 53% quality loss and that there is no evidence of manipulation found in either the metadata or the error level analysis. The lack of metadata also allows us to eliminate Photoshop and finally, we have a comment entry “YCbCr” which can be used to identify the routine used to generate the JPEG.

offset $0 0xFF 0xD8 SOI Start of Image

               DQT      length  precision table #
offset $2 0xFF 0xDB   0x00 0x43   0x0      0x0  : Quantization table
          Table 0 length 67 bytes 8 bit precision

    0x08 0x0A 0x0B 0x0D 0x0B 0x09 0x0E 0x0D 
    0x0C 0x0D 0x10 0x0F 0x0E 0x11 0x16 0x24 
    0x17 0x16 0x14 0x14 0x16 0x2C 0x20 0x21 
    0x1A 0x24 0x34 0x2E 0x37 0x36 0x33 0x2E 
    0x32 0x32 0x3A 0x41 0x53 0x46 0x3A 0x3D 
    0x4E 0x3E 0x32 0x32 0x48 0x62 0x49 0x4E 
    0x56 0x58 0x5D 0x5E 0x5D 0x38 0x45 0x66 
    0x6D 0x65 0x5A 0x6C 0x53 0x5B 0x5D 0x59
               DQT      length  precision table #
offset $47 0xFF 0xDB   0x00 0x43   0x0      0x1  :Quantization table
          Table 1 length 67 bytes 8 bit precision

    0x08 0x0A 0x0B 0x0D 0x0B 0x09 0x0E 0x0D 
    0x0C 0x0D 0x10 0x0F 0x0E 0x11 0x16 0x24 
    0x17 0x16 0x14 0x14 0x16 0x2C 0x20 0x21 
    0x1A 0x24 0x34 0x2E 0x37 0x36 0x33 0x2E 
    0x32 0x32 0x3A 0x41 0x53 0x46 0x3A 0x3D 
    0x4E 0x3E 0x32 0x32 0x48 0x62 0x49 0x4E 
    0x56 0x58 0x5D 0x5E 0x5D 0x38 0x45 0x66 
    0x6D 0x65 0x5A 0x6C 0x53 0x5B 0x5D 0x59

Quality Estimate

These tables are stored in zig-zag order. The strange thing is that these tables are identical, which does not really make sense since you can be far more aggressive with the quantization of the chroma data. Using the HP developed method, the estimated quality factor is 47% which shows quite a bit of compression. Part of the compression is due to the tables form chroma and luminance being the same. Using the jpegquality tool at Hacker Factory, I obtain a quality factor of  47% which is still low. And using the jpegdump program I obtain a quality factor of 55%.

Metadata

              COM      length          Y    C    b    C    r
offset $23c 0xFF 0xFE 0x00 0x07       0x59 0x43 0x62 0x43 0x72  : Comment

Another hint, a comment indicating the color space. Using the 0xFF

I opened the jpeg in preview, printed as PDF and examined the file. The YCbCr comment is still present.

Error Level Analysis

Using Hacker Factor’s error level analysis, I obtain the following ELA picture, showing no obvious evidence of forgery. However, the low quality of the jpeg complicates such an analysis.

test_err

Comparison

I have looked at various jpeg files:

Photoshop has JFIF  formatted information

                                                   version                           Thumb
                        J    F    I    F    0    1   2     1      72dpi    72dpi     size
   0xFF 0xE0 0x00 0x10 0x4A 0x46 0x49 0x46 0x00 0x01 0x02 0x01 0x00 0x48 0x00 0x48 0x00 0x00 
                        P    h    o    t    o    s    h    o    p    sp   3    .    0    
   0xFF 0xED 0x05 0xA6 0x50 0x68 0x6F 0x74 0x6F 0x73 0x68 0x6F 0x70 0x20 0x33 0x2E 0x30

The metadata from Hacker Factor also supports my findings

File
File Type JPEG
MIME Type image/jpeg
Comment YCbCr
Image Width 1652
Image Height 1276
Encoding Process Baseline DCT, Huffman coding
Bits Per Sample 8
Color Components 3
Y Cb Cr Sub Sampling YCbCr4:2:0 (2 2)
Composite
Image Size 1652×1276

11 thoughts on “JPEG – The Gory Details – Part 2 – File Contents

  1. Sorry, you can’t eliminate Photoshop because of the lack of metadata anymore than I can exclude the Xerox because of lack of metadata. Surely you know that.

    I can demonstrate for you that Preview will open a Photoshop or Illustrator file directly and allow you to save as a PDF, resulting in metadata identical to the WH PDF.

    The lack of metadata is a problem for you as well. Without the refry, you could have eliminated Photoshop. Now, not so much.

  2. So are you saying that it could either be Photoshop or Xerox that causes the various artifacts? So things like being able to move the registrar’s stamp around, no longer are clear, unambigious evidence of human tampering and that multiple 1-bit layers and one 8-bit layer could just be the results of MRC compression and not proof of forgery?

  3. The lack of metadata is a problem for you as well. Without the refry, you could have eliminated Photoshop. Now, not so much.

    There is still the JPEG comment. Sigh.. You do understand I am talking about metadata in the jpeg not the PDF itself?

    And yes, Preview removes a lot of telltale signs, which is why I dug a little deeper. And again, the journey was one of discovery. The lack of JPEG metadata was not the end. I finally reached the Xerox Workcentre, perhaps serendipitously, and found that a scan shows all the relevant artifacts found in the Whitehouse PDF.

  4. I can demonstrate for you that Preview will open a Photoshop or Illustrator file directly and allow you to save as a PDF, resulting in metadata identical to the WH PDF.

    Of course, if the JPEG contains metadata, preview will save it exactly. The research into the JPEG was to carefully examine all the raw data. I am sure that the Cold Case Posse did the same, even if they never reported on it?

    Well, during the careful analysis, I found a comment string which set in motion a search that ended with the Xerox workcentre.

    Of course, a dedicated forger could make it all look exactly like the real thing… But then you face an immense problem…

    Remember that the CCP found, what they claimed to be, evidence of a forgery. Now it has been shown that these same artifacts are generated by a Xerox workcentre….

    Any reasonable conclusion therefore would be that the conclusion about a forger was wrong, at least as far as it was based on these artifacts.
    I understand that the CCP has come up with other ‘tell tale’ signs. The race “african”, the “numbering”, and probably other red-herrings. But none of these are relevant to the highly compressed PDF. They all go back to the certified and verified copy of President Obama’s original birth certificate, which shows him born on US soil.

    I can understand why no attorney general or district attorney was willing to pick of this case of pure speculation.

  5. “They all go back to the certified and verified copy of President Obama’s original birth certificate, which shows him born on US soil.” Only the counterfeit fraudulent images show him being born in Hawaii. There is no Hawaiian Hospital original birth certificate anywhere in Hawaii or anywhere else, and no one in Hawaii will claim that there is. Anything that an obamunist accomplice placed in an archive can be labeled as “original”, just as is done with new BCs issued after the adoption process has sealed the true original into secrecy forever.

    No statement made by any Hawaiian official is actual certification of any thing other than information “matching” what is in their computer files. No one in Hawaii has found any original BC, to Abercrombie’s dismay. All there is is whatever is contained in their digital database and in their microfilm archive. No True Copy of those originals and negatives are issued anymore, -not for about two decades. All that’s produced are “Abstracts”. They can’t be certified as being a True Copy of anything since they are abstracts.
    Anyone who thinks that the image posted on the WH webside is of a real paper document doesn’t know the reality of how States produce what they call birth certificates in this day and age.
    The images in the database of the microfilm records are superimposed on an image of security paper with the image of the original paper eliminated back when States digitized their records.
    Nothing that is wholly in the digital realm is invulnerable to alteration, and a whole lot of alteration was used to produce the PDF, -adding layers of specific components, with other earlier layers unrevealed because they were flattened just as the final version was meant to be before release to the world. Learn more about the fraudulence of the PDF image at obama–nation. com.
    Adrien Nash

  6. Adrian

    I see you posted exactly the same comment here as you did on my blog today. I believe the call that spamming. I let it go but don’t do it again. Your claim about Governor Abercrombie has been debunked many times. He never said they never found the original records. Your comment is complete nonsense.

  7. [NBC: Layout changed for legibility]

    All birth certificates produced for the parents are abstracts. That is true for every state in the union and is more true today than in 1961.

    AD: “The images in the database of the microfilm records are superimposed on an image of security paper with the image of the original paper eliminated back when States digitized their records.”

    This false as the original birth certificate filled out in August, 1961 is on plain white paper as explained by the Hawaii DOH to WNDs document examiner.

    AD: “There is no Hawaiian Hospital original birth certificate anywhere in Hawaii or anywhere else, and no one in Hawaii will claim that there is. “

    Which of course is not surprising,

    “Despite numerous requests last week for the hospital to verify the correspondence, Kapi’olani spokeswoman Kristy Watanabe would only say: “Federal law does not permit us to provide any more details concerning information [about Obama’s birth] without authorization from Mr. Obama.”

    But they said this about the letter President Obama sent in which he said Kapiolani was “the place of my birth”,

    “Peters says Kapi’olani actually has a reproduction of the “original letter” on display at the hospital.”

    “The original is something that we treasure, and we know that it came from Mr. Obama,” she said, explaining only that the paper document was personally presented to them by U.S. Rep. Neil Abercrombie, D-Hawaii, who read its contents – straying at times from the actual text – at the hospital’s Centennial Dinner Jan. 24, the same day the letter in question is dated.”

    http://www.wnd.com/2009/07/104146/#3bvvqKL8XrQ7qkmF.99

    AD: “No one in Hawaii has found any original BC, to Abercrombie’s dismay.”

    Please read the three certified verifications from Dr. Onaka. He certified that the information on the pdf matches the original vital record on file. The pdf has a white border, the certified copies given to President Obama do not have a white border (see Guthrie photos) so it is not surprising that he cannot certify the pdf to be a true copy as it has obviously been changed.

    But Dr. Onaka has provided an additional certification at the bottom of each of the three verifications.

    “I certify that the information contained in the vital record on file at the Department of Health was used to verify the facts of this vital event.”

    AD: “Learn more about the fraudulence of the PDF image at obama–nation. com.”

    Frankly if this comment of yours is an example of your researching abilities, I’ll skip your site.

  8. Only the counterfeit fraudulent images show him being born in Hawaii. There is no Hawaiian Hospital original birth certificate anywhere in Hawaii or anywhere else, and no one in Hawaii will claim that there is.

    There is no evidence of fraud, did you not read my findings that a Xerox WorkCentre created the PDF, and that the artifacts are all related to the workflow?

    And you are wrong, the document is not scanned from microfilm either.

    I have now debunked the claims of fraud… Now what?

    And of course birth on soil remains sufficient for one to be natural born. Since all evidence shows our president born on soil, the birthers remain empty-handed and a bit embarrassed.

  9. Of course it is complete nonsense. Why else would he report such fascinating fantasy?

  10. Frankly if this comment of yours is an example of your researching abilities, I’ll skip your site.

    I visited his site. Not much of any relevance beyond the usual debunked myths.

    Hilarious… All because he fears and hates our President.

  11. Adrien Nash says:

    There is no Hawaiian Hospital original birth certificate anywhere in Hawaii or anywhere else, and no one in Hawaii will claim that there is. Anything that an obamunist accomplice placed in an archive can be labeled as “original”, just as is done with new BCs issued after the adoption process has sealed the true original into secrecy forever.

    Hospitals don’t keep birth certificates, States do, in their Vital Records. Birth certificates reissued after adoption don’t make up a new place of birth, either.

    No statement made by any Hawaiian official is actual certification of any thing other than information “matching” what is in their computer files. No one in Hawaii has found any original BC, to Abercrombie’s dismay. All there is is whatever is contained in their digital database and in their microfilm archive. No True Copy of those originals and negatives are issued anymore, -not for about two decades. All that’s produced are “Abstracts”. They can’t be certified as being a True Copy of anything since they are abstracts.

    From Director Fuddy: http://hawaii.gov/health/vital-records/Birth_Certificate_Request.PDF
    We hope that issuing these copies of your original Certificate of Live Birth will end the numerous inquiries received by the Department of Health to produce this document. … I have witnessed the copying of the certificate and attest to the authenticity of these copies.”

    From the Press release:

    “We hope that issuing certified copies of the original Certificate of Live Birth to
    President Obama will end the numerous inquiries related to his birth in Hawai’i,” Hawai’i
    Health Director Loretta Fuddy said. “I have seen the original records filed at the
    Department of Health and attest to the authenticity of the certified copies the
    department provided to the President that further prove the fact that he was born in
    Hawai’i.”

    “Director Fuddy made an exception for President Obama by issuing copies of the original birth certificate. The departmental policy to issue only computer-generated Certifications of Live Birth remains in effect for all birth records that have been computerized. Director Fuddy, in her capacity as Health Director, has the legal authority to approve the process by which copies of birth records are made.”

    Anyone who thinks that the image posted on the WH webside is of a real paper document doesn’t know the reality of how States produce what they call birth certificates in this day and age.

    The images in the database of the microfilm records are superimposed on an image of security paper with the image of the original paper eliminated back when States digitized their records.

    You don’t seem to know how Hawaii handles their vital records. Hawaii never microfilmed their records. They went straight from paper to computer records and now keep the original paper certificates in storage. The DOH now produces certified copies of birth certificates from computerized records, and young children after 2001 or so don’t even have original paper documents. But the DOH made a special exception for Obama, went to the archived copies, pulled the book containing his original birth record, copied the record onto security paper, and stamped and sealed it.

Comments are closed.