I am not endorsing their plans for a neighborhood panopticon, but if they do it, there are slightly more privacy-preserving ways it can be implemented, that don't just rely on all the bases belonging to them

The central authority would be Ring, who holds the C2PA signing key and who's verifiable signature attests to that video's specific hash+metadata existing at a point in time, captured on hardware it can verify as not modified, etc.

I've lived in places requiring his theoretical fulltime security presence and it definitely sucked. On Content Credentials, the C2PA spec supports remote signing that just needs the hash of the video and device/hardware attestation+authentication; you don't need to centrally store all the video.

To conclude: my silver lining hope is that AWS going down can be a learning moment, in which the risks of concentrating the nervous system of our world in the hands of a few players become very clear. And that this can help us craft ways of undoing this concentration and creating real choice ❤️ 13/

re: Everyday people, tech can do glass-to-glass authentication (camera lens to your screen), it's all 1s and 0s in between. But we'll never remove humans from system. Pre-glass we need witnesses/corroboration/attestation. Post-glass we need media literacy/cognitive immunology/COG SEC. Or put simply:

@mediaclusternorway.no #c2pa