Educating the Confused Muscatine and Applewhite

Work in progress… Metadata analysis has shown some interesting issues to be resolved

For some inexplicable reason, our friend Hermitian has suggested that Applewhite created the Muscatine Journal PDF at 09:00:38 Eastern time.

Let’s explore his failed analysis. First let’s look at the metadata for the page. Obj 9 0 provides the necessary information. Note the -6:00 offset which shows that the document was likely created in the Iowa time zone, which is also where the Muscatine Journal is edited…

obj 9 0
Type: /Page
Referencing: 4 0 R, 10 0 R, 12 0 R, 3 0 R, 11 0 R

<<
/CropBox [0.0 0.0 626.04 745.56]
/Parent 4 0 R
/Contents 10 0 R
/Rotate 0
/PieceInfo
<<
/AdobePhotoshop
<<
/Private 12 0 R
/LastModified “(D:20110427090136-06’00’)”
>>
>>
/ArtBox [0.0 0.0 626.04 745.56]
/MediaBox [0.0 0.0 626.04 745.56]
/Thumb 3 0 R
/Resources
<<
/XObject
<<
/Im0 11 0 R
>>
/ProcSet [/PDF/ImageC]
>>
/Type /Page
/LastModified “(D:20110427090139-06’00’)”
>>

What confused our friend? Well there is also an object with the following tag

Adobe Photoshop CS2 Windows 2011:04:27 09:00:38

Note that CS2 is quite an outdated version but I have found it to be still in use with the Muscatine Journal…

The object in question is a FlateDecode encoded stream Obj 14 0  which is referenced by Obj 12 which is the /Private Object in the Adobe Photoshop Object in Obj 9. In other words, it’s the time tag of the embedded jpeg.

The Producer tool for the PDF shows another hint

<pdf:Producer>Adobe Photoshop for Windows — Image Conversion Plug-in</pdf:Producer>

Obj 9 0 contains some Adobe specific information (see PieceInfo, ISO 32000-1:2008, 14.5))

    /PieceInfo
<<
/AdobePhotoshop
<<
/Private 12 0 R
/LastModified “(D:20110427090136-06’00’)”
>>
>>

The PieceInfo Dictionary contains private information that is only useful for Adobe that can be used to store additional metadata

Then there is the following metadata Obj 6 0, which is the /Info object in the trailer.

obj 6 0
Type:
Referencing:

<<
/CreationDate “(D:20110427090038-05’00’)”
/Subject “(This handout image provided by the White House shows a copy of the long form of President Barack Obama’s birth certificate from Hawaii. \\(AP Photo”
/J. ‘Scott Applewhite\\))’
/Author (J. Scott Applewhite)
/Creator ( Adobe Photoshop CS2 Windows)
/Producer (Adobe Photoshop for Windows — Image Conversion Plug-in)
/ModDate “(D:20110427090139-05’00’)”
/Title (Obama)
>>

The Image Conversion Plugin took the original photograph by Applewhite imported it into Photoshop, replacing the relevant metadata with the metadata from the JPEG.