On the Friday before the sixth anniversary of 9/11, Osama bin Laden appeared in a new video, his first since prior to the U.S. presidential elections in 2004. In analyzing the video, Neal Krawetz of Hactor Factor, an expert on digital image forensics, said in his latest blogs that the video contained many visual and audio splices, and that all of the modifications were of very low quality.
Most striking is bin Laden's beard, which has been gray in recent images. For this video it is black. "As far as my tools can detect, there has been no image manipulation of the bin Laden portion of the image beyond contrast adjustment. His beard really does appear to be that color." The Washington Post has the full video here.
Krawetz says the inner frame of bin Laden was resaved at least twice, and not at the same time. The images show fine horizontal stripes on bin Laden and a background indicating these came from interlaced video sources. In contrast, the text elements, such as the As-Sahab logo, appear to be from non-interlaced sources.
The September 7 video shows bin Laden dressed in a white hat, white shirt and yellow sweater. Krawetz notes "this is the same clothing he wore in the 2004-10-29 video. In 2004 he had it unzipped, but in 2007 he zipped up the bottom half. Besides the clothing, it appears to be the same background, same lighting, and same desk. Even the camera angle is almost identical." Krawetz also notes that "if you overlay the 2007 video with the 2004 video, his face has not changed in three years--only his beard is darker and the contrast on the picture has been adjusted."
More important though are the edits. At roughly a minute and a half into the video there is a splice; bin Laden shifts from looking at the camera to looking down in less than 1/25th of a second. At 13:13 there is a second, less obvious splice. In all, Krawetz says there are at least six splices in the video. Of these, there are only two live bin Laden segments, the rest of the video composed of still images. The first live section opens the video and ends at 1:56. The second section begins at 12:29 and continues until 14:01. The two live sections appear to be from different recordings "because the desk is closer to the camera in the second section."
Then there are the audio edits. Krawetz says "the new audio has no accompanying 'live' video and consists of multiple audio recordings." References to current events are made only during the still frame sections and after splices within the audio track." And there are so many splices that I cannot help but wonder if someone spliced words and phrases together. I also cannot rule out a vocal imitator during the frozen-frame audio. The only way to prove that the audio is really bin Laden is to see him talking in the video," Krawetz says.
Another bin Laden video was released on September 11 and was much more straightforward. There was a still image of the black-bearded bin Laden (oddly, using a frame not used in the previous video), and then, as has been a tradition at al-Qaida , there was a long, unedited video of a statement read by Azzam Al Amriki, also known as American-born Adam Pearlman, who is currently being sought for treason and thought to be living in Pakistan. That doesn't mean the 9/11-released video wasn't doctored.
Click here and mouse over the image to see Krawetz's 75 percent error level analysis of one image. The white frame around Azzim reveals that his video was composited against the drawing of the World Trade Center being attacked. As Krawetz presented at this year's Black Hat conference in Las Vegas, al-Qaida has a history of doctoring background either to present propaganda or simply to disguise locations. In a separate interview, Krawetz talks with CNET News.com about some of the tools he used in his analysis.
LAS VEGAS--In a presentation at the Black Hat conference here Tuesday, Neal Krawetz of Hacker Factor showed how basic manipulations to images can be revealed through digital analysis.
After presenting on the specific techniques he used, Krawetz launched into what he called the case of "Dr. Z," who happens to be Ayman al-Zawahiri, the No. 2 man in al-Qaida.
Using a photo that originally appeared on December 20, 2006, in USA Today, al-Zawahiri appears to be seated before a large banner with a desk underneath. On the desk, in the photo, is a tiny cannon. Yet in the text, al-Zawahiri is described as sitting with "a rifle behind his shoulder that was leaning against a plain brown backdrop."
Using the techniques demonstrated earlier in the talk, Krawetz deconstructed the image to show a halo around al-Zawahiri that suggests that he was likely sitting in front of a monochromatic screen. Even the letters on the banner had been altered. Further, the overall image had been cropped from the original.
Krawetz showed another image of al-Zawahiri from July 27, 2006, showing him seated in what appears to be a television studio. Krawetz said many people who saw this video were outraged that he could sitting in a television studio somewhere, yet the U.S. government couldn't find him.
Image analysis suggests that the studio and the various pictures positioned in the studio around him were added later. Again, a halo around al-Zawahiri suggests that he was shot in front of a monochromatic screen and pasted into a new background.
The studio background behind al-Zawahiri includes five different elements placed within the shot: The picture of Mohammad Alef is taken from a video of a wedding ceremony. The picture of the Twin Towers and the picture of Mohammad Atta are both taken from the 911 Commission report. Meanwhile, the studio itself appears created; the lighting suggests that the wall is an unlikely 1 foot behind al-Zawahiri, for example.
Krawetz found an image from the SITE Institute, an organization that tracks terrorism worldwide. (SITE stands for Search for International Terrorist Entities.) The image was intercepted before it was released by al-Qaida.
In the SITE video, al-Zawahiri appears before a blackened backdrop. In the upper-right corner, there appears to be the edge of a wall or screen. By adjusting the contrast, Krawetz could see that the wall behind al-Zawahiri is a draped backdrop. Krawetz didn't show the final al-Qaida image, but it likely included a composite of images designed to disguise his true location and press a specific message. As was the case in the final image Krawetz showed.
An image of Azzam al-Almriki, another member of al-Qaida, showed the young man seated in an office with a computer and a stack of books. Image analysis shows that the books were added. What an odd detail, yet it must be there to convey added meaning.
Throughout his demonstration, Krawetz did not speculate on the reasons behind al-Qaida's image manipulation. His interest is only that the images were manipulated and that the specific changes could be revealed.
- prev
- 1
- next
