Retr0id

Security researcher David Buchanan, known online as Retr0id, has published a blog post describing how to hack time within C2PA, the content-credentials standard used to cryptographically attest when and how media was created. The write-up details weaknesses that let signed provenance metadata carry misleading timestamps, raising fresh doubts about the standard's reliability for verifying authentic photos and videos.