Is "IPTC Digest d41d8cd98f00b204e9800998ecf8427e" in the exif data proof for...?

Started by Robin21, November 26, 2020, 10:05:45 AM

Previous topic - Next topic

Robin21

Dear all!

I have a picture I received that has the
IPTC Digest
d41d8cd98f00b204e9800998ecf8427e
line.
 
The picture does not contain too much EXIF data, what concerns me is the lack of creation date.

See picture.

How is this possible? Is that line can be a proof that the picture has been modified with an image editing software? Or the exif data had been erased?

Thank you in advance!

Phil Harvey

That IPTC digest matches the CurrentIPTCDigest, so the IPTC didn't exist when the IPTCDigest was written.

The file has definitely been modified, but I can't easily say whether or not the image was changed.

- Phil
...where DIR is the name of a directory/folder containing the images.  On Mac/Linux/PowerShell, use single quotes (') instead of double quotes (") around arguments containing a dollar sign ($).

StarGeek

I do not believe that any image taken directly from a camera will have an IPTCDigest tag, so it's almost a certainty that the image metadata has been altered.

The IPTCDigest has nothing to do with EXIF data.  It is a checksum of the IPTC IIM/Legacy data and is used to compare such data to the matching XMP data.  If there is a discrepancy, it shows that the data is no longer in sync.

If I recall correctly, an IPTCDigest with a value of d41d8cd98f00b204e9800998ecf8427e is the correct value for when a file has no IPTC data.
"It didn't work" isn't helpful. What was the exact command used and the output.
Read FAQ #3 and use that cmd
Please use the Code button for exiftool output

Please include your OS/Exiftool version/filetype

Robin21

Quote from: Phil Harvey on November 26, 2020, 10:19:01 AM
That IPTC digest matches the CurrentIPTCDigest, so the IPTC didn't exist when the IPTCDigest was written.

The file has definitely been modified, but I can't easily say whether or not the image was changed.

- Phil

Thanks Phil!

And I guess the only way a photo taken with a mobile phone and does not contain a creation date if it was wiped?

I'm really curious how this will play out, because the photo in question was taken via a car-sharing app, that I used and now they want to make me pay for a damage I didn't cause.

Allegedly they say, all the saved photos contain the metadata, however, only my photos do really contain all the vital information. The person who took the first photo is a colleague of this company, so he could have access to the source files.

This is my photo with complete EXIF data, taken with the same mobile app.

It is very strange indeed...

StarGeek

Quote from: Robin21 on November 26, 2020, 10:37:13 AM
And I guess the only way a photo taken with a mobile phone and does not contain a creation date if it was wiped?

It depends upon the app used.  Some apps will not include any metadata, either for privacy reasons (WhatsApp, for example) or because the programmers didn't bother to include code to write such details.
"It didn't work" isn't helpful. What was the exact command used and the output.
Read FAQ #3 and use that cmd
Please use the Code button for exiftool output

Please include your OS/Exiftool version/filetype

Robin21

Quote from: StarGeek on November 26, 2020, 12:51:35 PM
Quote from: Robin21 on November 26, 2020, 10:37:13 AM
And I guess the only way a photo taken with a mobile phone and does not contain a creation date if it was wiped?

It depends upon the app used.  Some apps will not include any metadata, either for privacy reasons (WhatsApp, for example) or because the programmers didn't bother to include code to write such details.


But then all photos should contain those or none of them. Mine has all the data that was sent through the app, but the other picture (sent with the same app) only has the resolution data.