What Happens When You Try to Photoshop Money

http://hyperallergic.com/195922/what-happens-when-you-try-to-photoshop-money/

by michaelpinto • 11 years ago

193 105 11 years ago

hyperallergic.com

mg1982• 11 years ago

I had no idea the spockyourfive thing was a thing, but I'm kind of glad it is.

Worth a look if any of this amused you: http://www.thepoke.co.uk/2014/08/05/10-banknotes-improved-by...

jerje• 11 years ago

This is a good read. http://en.m.wikipedia.org/wiki/EURion_constellation always wondered about performance if these apps are scanning every image for this pattenrn

TazeTSchnitzel2• 11 years ago

It's known to not be the EURion constellation that image software uses, it's some secret proprietary mechanism. See http://www.cl.cam.ac.uk/~sjm217/projects/currency/ which is cited by the page.

135• 11 years ago

Interestingly even Adobe doesn't know what it is, the detection software was supplied to them as a binary. I messed around with it in a similar way to the author out of sheer curiosity and ended up completely baffled by the whole thing, even trying to eliminate parts that aren't triggers is impossible by my measure. I should make it clear I have no desire whatsoever to thwart the system (as others point out, simply using different software does that), but the methods it is using seem to completely defy all of the fingerprinting systems I'm aware of and is therefor incredibly interesting as a result.

davb2• 11 years ago

I've run into this a couple of times over the last 10 oer so years when scanning documents. Rarely, a document will trigger a false-positive on a network scanner (or printer-scanner-copier) and I have had to manipulate the document by trial/error to trick the device into scanning it properly.

A few months ago, one of our Konica all-in-one units flat out refused to scan a customer invoice, claiming that it's illegal to scan banknotes.

jrockway3• 11 years ago

I like how the workaround is to open the file with The Gimp and export to psd. Then Photoshop will open it fine.

I'm assuming this is a case of "the suits told us it couldn't import banknotes", so they made it not import banknotes. Banknotes that were already imported... well you didn't say anything about that.

(The same thing happened for the DVD encryption. Someone asked an engineer for encryption. The engineer just happened to have made it easy to bruteforce the key, negating the entire point of the encryption.)

Remember: you're the software engineer -- write the software you want, not the software you think someone wants you to write.

rjaco31• 11 years ago

write the software you want, not the software you think someone wants you to write

It's not always that easy =(

135• 11 years ago

"Encryption" of media like that is always just going to be obfuscation, you get protection form the anti DMCA removal law, the actual encryption isn't worth the bits it flips. In fact, if you make it "stronger" from a cryptographic standpoint you simply make it cost more to decode and add no strength to the actual defense it is trying to provide (getting further under DMCA umbrella). If you want to criticize it was probably foolish to include actual encryption in the first place, why waste cycles when you can XOR with 0x69?

poizan42• 11 years ago

And what about the 6.68 billion people that are not subject to the DMCA?

jacquesm• 11 years ago

Remember: you're the software engineer -- write the software you want, not the software you think someone wants you to write.

That's easier said than done, kudos to those that pull that off but there is this thing called code review and if your co-workers are halfway competent you'll get called on what you built. In some cases that can be a career limiting move.

Better to pick your employers so that you don't end up as an enabler of technology used against the public interest.

Of course if you're going to 'take one for the team' and purposefully gain employment somewhere for the sole reason of messing with the machine that's a laudable strategy but it will likely come at a price in the longer term.

Silhouette3• 11 years ago

And so it should be. We're talking about a technological measure that is being implemented with the intent of preventing an actual crime. There is a real possibility in this case that undermining the measure will increase the amount of that type of crime that is committed. There is also little evidence that the measure is being abused by others on a significant scale with actual negative side effects for anyone.

Now, a developer might not want to implement that measure because they were concerned with other consequences that might not be in the public interest, or with the future potential for such consequences. This might be a perfectly reasonable position morally and/or technically, and as you say, that developer has the choice not to take that job. It's not as if good programmers are starving in the streets for lack of other opportunities, after all.

But if you do take a job as a programmer on a project, typically your authority and responsibility do not extend to setting the requirements and deciding on policies like this. If you presume to deliberately undermine those whose jobs do include making those decisions, you should be treated as a bad employee and dealt with accordingly, and that does include being fired, getting a professional reputation for being unreliable and not a team player, and so on.

gliese1337• 11 years ago

Figuring out how to manipulate the Someone so that they want you to write what you want to write- or at least tell you to write what you want to write, or to compromise on writing something closer to what you wanted to write- seems a useful strategy for mitigating those risks.

I have recent relevant experience in this regard. I'm working on a system for university-level language professors, a large part of which is making it easy for them to use videos for homework assignments. We recently had a meeting with one of the university's copyright lawyers to ensure that the video delivery system was sufficiently "safe", and they'd be legally protected from being sued for copyright violations when professors want to use films in their classes.

We quickly discovered that, if we explained things well enough that the copyright lawyer was capable of understanding how decrypted video ended up on the students' screens, and thus how a sufficiently tech-savvy student might possibly pirate it, they would freak out and insist we Do Something More. The obvious solution: stop explaining how things work, 'cause this is just making more work for ourselves. Tell them "other people used this thing and didn't get sued", and deflect all technical questions, on the other hand, and they leave us alone and let us work on something reasonable.

jrockway3• 11 years ago

All I'm saying is to think about what you want to do, and understand that in the context of employment, business goals, and so on. Don't just take someone's task list, and work on it from top to bottom. Make the task list something you own and want to work on.

Also, if you decide you don't want to try that hard on "anti-counterfeiting" protection, that's fine with me ;)

If you fuck up your goals, yup, you could be fired. Supply of programmers is much lower than demand, so I bet you'll find more work. Or you can retire and repair bicycles for a living. You'll do fine.

smackfu• 11 years ago

Remember: you're the software quality engineer -- test the meaning of the requirements, not the text of them.

iamcurious2• 11 years ago

I liked that last phrase, so I generalize it:

Remember: you're the Xer -- do the X you want, not the X you think someone wants you to do.

Silhouette3• 11 years ago

Let's try that principle in a few other contexts.

"Remember, you're the politician. Pass the laws you want, not the laws you think the electorate want you to pass."

"Remember, you're the soldier. Fight the wars you want, not the wars you think your country's leadership want you to fight."

"Remember, you're the fireman. Fight the fires you want, not the fires you think the person who called 911 wants you to fight."

The idea that you should do whatever you want regardless of the team or management you work with looks pretty dumb when you apply it to situations that actually matter. The world would not be a better place if everyone decided to just assume they're right all the time and ignore everyone else.

ryan-c2• 11 years ago

(The same thing happened for the DVD encryption. Someone asked an engineer for encryption. The engineer just happened to have made it easy to bruteforce the key, negating the entire point of the encryption.)

The DVD Content Scramble System came out in 1996, at which time the US still heavily regulated the export of "strong" crypto. DVD-CSS uses a LFSR-based stream cipher with a 40 bit key because it could be implemented efficiently in hardware, and the export restrictions did not apply to ciphers with 40 bit keys. Considering the constraints it was designed under I don't think anyone should be inferring that it was weak on purpose.

mstromb• 11 years ago

Well, it was weak on purpose. But for the US government's purpose, not the engineer's.

userbinator3• 11 years ago

write the software you want, not the software you think someone wants you to write.

This brings up the thought of whether some of the developers for locked-down systems like game consoles, phones, tablets, etc., are deliberately introducing vulnerabilities with the intention of enabling users to use them to take control of their devices, and of course they would behave entirely as if it was accidental. It's somewhat far-fetched and optimistic, but certainly a nice possibility to think about...

mahyarm• 11 years ago

I feel like it's more of a case of "Never attribute to malice that which is adequately explained by stupidity.".

Even though console/content lockdown is a business line item, it's not as much of a priority to the business to ship a console that will sell well, and to develop it with deadlines that are too short.

elwell• 11 years ago

Here's a hi res image of a ten dollar bill. It's pretty cool: http://i.imgur.com/XInY8HI.jpg

butwhy• 11 years ago

You wouldn't download a ten dollar bill.

jimlei2• 11 years ago

I would download a car, a handbag, a television and a ten dollar bill if I could.

edit: just kidding - I'd probably download a parking lot worth of cars

spacemanmatt2• 11 years ago

Technically, I just did.

semi-extrinsic2• 11 years ago

I'm not an expert by any means, but to me that looks too low-res to be useful for printing money. Still cool though.

vacri3• 11 years ago

It depends on what you want to use it for. Australia currently has polymer currency that means we've basically forgotten about counterfeiting, but before that we had a $100 note that was greyscale with a bare whiff of colour. Not the best design. You'd occasionally hear stories of people who'd simply photocopy the bill on standard paper, scrunch it up to look used, then find a sleepy clerk at a late night convenience store. Buy a couple of bucks worth of stuff, leave with >$95 real change. You'd have to be pretty inattentive to be fooled by it, but, well, humans have foibles...

bluedino• 11 years ago

People are often successful at passing very, very low quality counterfeit bills.

krick2• 11 years ago

Absolutely. +jpeg.

lucb1e• 11 years ago

Hi res images of a 50 bucks euro bill: https://lucb1e.com/rp/randomupload/euro/

If you zoom in, you can see 50 written in many places in a really tiny font, barely visible if you look at it with the naked eye. In number 1, the yellow dots are clearly visible (if I remember correctly these are what Photoshop looks for).

ygra• 11 years ago

Those yellow dots are the EURion constellation, which the article says is not what Photoshop looks for.

vacri3• 11 years ago

Now to find a ragpaper laptop screen...

qnaal2• 11 years ago

I guess this is orthogonal to those little yellow circles?

spacemanmatt2• 11 years ago

They yellow dots watermark output with printer identification information. I think this serves CDS, but has potential to be used/misused for so much more.

qnaal2• 11 years ago

Sorry, I forgot that the printer dots were lingering in the HN consciousness- I was thinking of these things [0] (shown here [1] on the us $10, with little ones next to them to give apparent visual purpose) which I've also seen on non-currency things such as event/movie tickets iirc. Wikipedia suggests a scanning-hardware focus of the circles, as opposed to the software focus of the "Counterfeit Deterrence System" discussed in OP.

[0] http://en.wikipedia.org/wiki/EURion_constellation

[1] http://i.imgur.com/XInY8HI.jpg left side

jimlei2• 11 years ago

They mention this was "discovered three years ago", but I was sure I remembered this from years back.

"Adobe adds algorithms to Photoshop that prevent users from opening or printing scanned money. While we've been aware of this feature for quite a while" Posted by Craig Swanson on May 14, 2006 07:03 PM http://www.creativetechs.com/iq/how_to_use_scanned_money_in_...

edit: seems to be more info here, from 2004. Latest Photoshop version contains anti-counterfeit measures http://www.geek.com/news/latest-photoshop-version-contains-a...

f055• 11 years ago

I encountered this error in 2005 on a Photoshop version that was 2 or 3 years old. Also, back then you could mirror the scanned bill in some other app and it would open fine in PS. It is funny how this is still front page news in 2015 :P

__chrismc• 11 years ago

Me and a friend tried it with a (UK) bank note while we were at school, way back in the 90's, and received a warning about not being allowed to print scanned currency on screen when the scan finished. It might not have been Photoshop we used (Paint Shop Pro springs to mind), but similar detection techniques have been around for a long time!

fanf2• 11 years ago

See also this research from the security group at the University of Cambridge Computer Lab: http://www.cl.cam.ac.uk/~sjm217/projects/currency/

digimarkup• 11 years ago

I was just asking about this yesterday: https://news.ycombinator.com/item?id=9309120

I would love to know how to manipulate images/documents to make it so that photoshop won't open them and photocopiers won't copy them...

lexicality• 11 years ago

Just pop the EURion constellation in them somewhere (ideally a number of variations of it). http://en.wikipedia.org/wiki/EURion_constellation

bwblabs2• 11 years ago

Would be funny to include http://en.wikipedia.org/wiki/EURion_constellation on websites, so you cannot make screenshots with Photoshop ;)

MichaelApproved• 11 years ago

From the first paragraph of your link: "Research shows that the EURion constellation is used for color photocopiers and is likely not used for computer software."

bwblabs2• 11 years ago

Another trick is to invert the colors and then import it to Photoshop & invert it back.

akavel• 11 years ago

The awesome article exploring and testing the protection mechanisms, with pictures, from ~2009 (actually earlier probably, that's the "last modified" date of the article):

http://www.cl.cam.ac.uk/~sjm217/projects/currency/

(author notes his own earlier presentations on this topic starting 2004)

venomsnake• 11 years ago

It is good that the same tools that can be used for creating and bypassing game DRM, trainers and hack does not work here ...

weinzierl• 11 years ago

As far as I know many countries use Digimarc for their money.

EDIT: Here is a source:

    Recent versions of image editors such as Adobe 
    Photoshop or Paint Shop Pro refuse to print banknotes. 
    According to Wired.com, the banknote detection code in 
    these applications, called the Counterfeit Deterrence 
    System (CDS), was designed by the Central Bank 
    Counterfeit Deterrence Group and supplied to companies 
    such as Adobe as a binary module. However, 
    experiments by Steven J. Murdoch and others showed that 
    this banknote detection code does not rely on the 
    EURion pattern. It instead detects a digital 
    watermark embedded in the images, developed by 
    Digimarc.

http://en.wikipedia.org/wiki/EURion_constellation

An interesting hack is that this Digimarc pattern could be used for a Copy Attack [1]. To my knowledge the mark is not tied to the image of the bank note in any way. So in short: You could extract the Digimarc pattern and apply it to any other document, which then in turn could not be edited by mentioned software.

[1] https://en.wikipedia.org/wiki/Copy_attack

kweks• 11 years ago

Correct! http://wildsparx.com/eurionize/

tokenizerrr• 11 years ago

Sadly that download link appears to be dead.

edit: found it here https://github.com/jplona/code/blob/master/eurionize.pl

schoen• 11 years ago

Note that the Digimarc currency watermark is distinct from the EURion constellation. The latter has been well-documented publicly, the former not yet, as far as I know.

userbinator3• 11 years ago

The fact that the watermark detection algorithm doesn't seem to require a tremendous amount of processing power unlike most image processing/detection algorithms - apparently it's present in scanners and photocopiers too - implies that it could also be embedded in camera firmware, making it very possible to produce cameras that refuse to take pictures of certain things... I find that more unsettling since scanners/photocopiers are somewhat more specialist equipment today, whereas practically everyone has at least one camera. Imagine not being able to take a picture of something crucial like a crime in progress because there happened to be something watermarked present in the scene. That's why I don't believe in leaving these types of moral decisions to the machine.

I think it's only the legal issues that keep people from RE'ing the algorithm and generating obviously-non-banknote images which get detected, in a similar spirit to this:

http://news.cornell.edu/stories/2015/03/images-fool-computer...

As the watermark detection algorithm is not that resource-intensive, I would guess that a false positive is even easier to produce.

Lawtonfogle• 11 years ago

Wait, so you are against the new PROTECT system that scans all images for signs of child sexual abuse and blocks and reports any images containing those signs? Why do you love child abuse images so much? Why are you protecting child molesters? Are you are a pedophile?

All said with a /s, but with a serious question. What happens when we reach a point where the software and hardware exist to do this? Many hosting providers are already doing something similar as well. I believe they work by taking a image hash and comparing it to a known database, but the newer hashes work even as the images are slowly modified.

Would there be any way to stand against this trend without being demonized?

thekaleb• 11 years ago

I wonder how it would work if I had a t-shirt with this constellation watermark on it.

616c• 11 years ago

And GIMP for the win! Finally a reason the GIMP is better than Photoshop. Haha.

(Jokes aside, I love GIMP and just want to make clear I hate the whining of the irrational "GIMP is worse than Photoshop" family of HN posters.)

mkr-hn• 11 years ago

It's interesting hearing complaints about GIMP from Photoshop-using friends. They're mostly the same complaints I had trying Photoshop. It's clear to me the problems are more experience than legitimate issues.

swayvil• 11 years ago

agreed. GIMP is my good friend. I use it every day.

elliottlan• 11 years ago

This jogged my memory - I remember these coming out in 2004: Adobe_Photoshop_CS_Banknote_Patch-TiGER Adobe_Photoshop_CS_v.8.01_Banknote_Patch-PARADOX

byuu• 11 years ago

Added to Photoshop 8 (CS). It's a good thing it's completely impossible to run Photoshop 7 still, right? ... /s

iolothebard• 11 years ago

Actually I believe it was added to PS 4.0. Probably improved upon since then. So you can dig up an ancient 90s high quality inkjet and PS 3.0 to copy money if you really want to.

Or you could do what the really clever criminals do and just go into banking and finance.

anonbanker• 11 years ago

GIMP is much cheaper, and less of a hassle.

chiph• 11 years ago

Photocopiers will keep a count of the number of attempts to copy currency, and the copier leasing company tracks those numbers. I wonder if Photoshop does the same.

agumonkey• 11 years ago

I now have a strong theory on why printers are so hard to use.

driverdan• 11 years ago

Source?

nashashmi• 11 years ago

I wonder if this is the reason why Paint .NET went closed source.

Grue3• 11 years ago

This is why GIMP is superior. It doesn't impose what you can and cannot edit, and never will.

davexunit• 11 years ago

Yes, this is a good example of why Free Software is very important.

AndrewKemendo• 11 years ago

Oh wow.

There is nothing preventing Adobe from implementing a script that auto forwards your account details (Via Adobe Cloud!) to law enforcement if the CDS detects money. That alone could easily be made into probable cause and based on how easily warrants are being given nowadays, could easily lead to a no knock warrant being issued.

lostlogin• 11 years ago

I imagine the legal bill developing that scheme wouldn't be small as there are quite a few countries laws to be considered. Here in NZ the way to get a massively overreaching search warrant is just to say that the FBI are interested, see Kim Ditcom.

joeblau• 11 years ago

I've tired to open the bills in the post and a few bills in this thread and they all open with no problems in Affinity Designer [1].

[1] https://affinity.serif.com/

krick2• 11 years ago

Nothing new, and honestly I'm not so worried about Photoshop, as it's some closed-source program, which does whatever it wants and has a bunch of good alternatives anyway (well, for drawing purposes, at least, because I still can't convince myself Gimp is usable).

What is much more disturbing: I still don't know if it's possible to find hardware devices like scanner and printer, that do what they are intended to do, and are not masking banknotes or leaving special marks on printed image.

TaylorGood• 11 years ago

For a marketing campaign, "bonus cash" was the offer. An image that wouldn't open in Photoshop was able to open in Illustrator, which, dragging that image from Illustrator to Photoshop worked perfectly.

hammock• 11 years ago

"Printer steganography is produced by laser printers, including Brother, Canon, Dell, Epson, HP, IBM, Konica Minolta, Kyocera, Lanier, Lexmark, Ricoh, Toshiba and Xerox, where tiny yellow dots are added to each page. The dots are barely visible and contain encoded printer serial numbers and timestamps."

popper189• 11 years ago

Interesting...

What Happens When You Try to Photoshop Money

Related Stories