One thing to consider is that if you were to succeed in placing hidden text/image on an ID card, it may fail manual forgery checks at airports and police stations. One of the many ways IDs are checked is with different types of lighting[1]. This might have made this stand out as an artifact, which could result in an officer doubting its legitimacy.
In Germany there is a discussion about only allowing approved photographers for passport photos and them sending the pictures directly to the authorities.
They are also very picky about the images here. When I got a new passport recently they investigated my images thoroughly with a magnifying glass and almost rejected them because of a few white pixels you could not see with the naked eye. Only when they saw that the pixels were different between multiple copies they conclude that it was probably a printer issue and found one copy that had almost none which they accepted.
I think authorities are well aware of the risk mentioned in the article here.
thesimon · 4h ago
> In Germany there is a discussion
The discussion concluded with it being codified into law.
How it's gonna work apparently is that the image will be stored E2E-encrypted in the cloud and at the photographer you'll get a barcode that contains the URL to the image and the key to decrypt it. To upload the image into the cloud, the photographer will need to use a secure ID card to sign in.
[1] https://www.airport-suppliers.com/supplier-press-release/the...
They are also very picky about the images here. When I got a new passport recently they investigated my images thoroughly with a magnifying glass and almost rejected them because of a few white pixels you could not see with the naked eye. Only when they saw that the pixels were different between multiple copies they conclude that it was probably a printer issue and found one copy that had almost none which they accepted.
I think authorities are well aware of the risk mentioned in the article here.
The discussion concluded with it being codified into law. How it's gonna work apparently is that the image will be stored E2E-encrypted in the cloud and at the photographer you'll get a barcode that contains the URL to the image and the key to decrypt it. To upload the image into the cloud, the photographer will need to use a secure ID card to sign in.
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikat...
Was kinda interested in building software for this, but it feels like you need to pay a lot of people for fancy audits.