Researcher and computer security consultant Neal Krawetz first claims that the logos of As-Sahab, al-Qaeda’s media arm, and the US-based IntelCenter organization, which monitors terrorist activity, were added to a video released by al-Qaeda deputy leader Ayman al-Zawahiri at the same time, then retracts the claim when IntelCenter protests. Krawetz initially makes the claim during a presentation at a security conference about how analysis shows al-Qaeda videos are manipulated and backgrounds are added later. Krawetz says that the As-Sahab and IntelCenter logos have the same error level, so they must have been added at the same time. However, IntelCenter says that it did not add the As-Sahab logo and that just because two items in an image have the same error level, that does not mean they were added at the same time. Krawetz then tells a journalist that he retracts his initial claim and says that the IntelCenter logo has a different error level and was added later. The journalist comments: “However, in a taped interview I conducted with him after his presentation, he said the logos were the same error levels and that this indicated they were added at the same time. Additionally, after I’d written the first blog entry about his presentation, I asked him to read it to make sure everything was correct. He did so while sitting next to me and said it was all correct. He apologizes now for the error and the confusion it caused.” [Wired News, 8/2/2007] Krawetz’s method of analysis will attract some criticism. For example, Cambridge University expert Marcus Kuhn will say that Krawetz’s tools were designed for still images, not video, and could lead a user to believe that a video had been manipulated when in fact it had not. [Times, 8/6/2007]
September 12, 2007: Some Problems with Possible New Bin Laden Video Noted by Analyst
Problems with a recently released video featuring a man thought to be Osama bin Laden surface. In particular, the 26-minute recording only contains two short sections where the man said to be bin Laden is seen talking. The first covers the initial two minutes of the tape, the second begins after around twelve and a half minutes and lasts for about 90 seconds. The remaining 23 minutes of the tape show only a still image of the speaker. There are also many audio and video splices in the tape and the two live sections appear to be from different recordings, as the desk in front of bin Laden is closer to the camera in the second section. Analyst Neal Krawetz says, “the new audio has no accompanying ‘live’ video and consists of multiple audio recordings… And there are so many splices that I cannot help but wonder if someone spliced words and phrases together. I also cannot rule out a vocal imitator during the frozen-frame audio. The only way to prove that the audio is really bin Laden is to see him talking in the video.” Krawetz will also note the similarities with bin Laden’s previous video, released just before the 2004 US presidential election (see October 29, 2004): “[T]his is the same clothing [a white hat, white shirt and yellow sweater] he wore in the 2004-10-29 video. In 2004 he had it unzipped, but in 2007 he zipped up the bottom half. Besides the clothing, it appears to be the same background, same lighting, and same desk. Even the camera angle is almost identical.” Krawetz also comments, “if you overlay the 2007 video with the 2004 video, his face has not changed in three years—only his beard is darker and the contrast on the picture has been adjusted.” [News(.com), 9/12/2007] However, most of the Western news coverage about the video fails to point out that most of the video is a still image. [CNN, 8/8/2007; National Public Radio, 9/7/2007; BBC, 9/8/2007]