Hacker News Reader

> So forged documents should leave much more evidence with timestamps, office patches versions, error handling etc

It looks like we may only have seen scanned copies of the documents, so any Office metadata would be missing.

I wonder if there is any other subtle metadata. Perhaps default tab stops or borders?

printer steganography?

Unfortunately i don't think that would have much bearing on the origin of the content pre-printing.

Except printer dots are a printer specific serial number. If it was printed on a recent printer then that might be concrete proof of forgery (i.e. if the supposed original document was submitted as evidence as having been contemporaneous of the document's date but was shown to have been printed much more recently because of printer dots).

If you see what I mean...

And I'm not really commenting on the current case (not familiar with it at all)... just positing a possible way to prove a document's date as inaccurate.

Reply on news.ycombinator.com