1 00:00:00,000 --> 00:00:29,980 Transcription by CastingWords 2 00:00:30,000 --> 00:00:59,980 Transcription by CastingWords 3 00:01:00,000 --> 00:01:29,980 Transcription by CastingWords 4 00:01:29,980 --> 00:01:59,960 Transcription by CastingWords 5 00:01:59,960 --> 00:02:29,940 Transcription by CastingWords 6 00:02:29,940 --> 00:02:59,920 Transcription by CastingWords 7 00:02:59,920 --> 00:03:09,920 Transcription by CastingWords 8 00:03:09,920 --> 00:03:12,060 Transcription by CastingWords 9 00:03:12,060 --> 00:03:17,800 Transcription by CastingWords 10 00:03:17,800 --> 00:03:22,600 document was created was probably that somebody was going to look at it in 11 00:03:22,600 --> 00:03:26,620 Photoshop and it would look like a single layer okay and so and it does 12 00:03:26,620 --> 00:03:33,820 because it is a scanned supposed to be a scanned photo okay but what it is is they 13 00:03:33,820 --> 00:03:39,640 used the basis of a scanned photo to create the content with that I'm gonna 14 00:03:39,640 --> 00:03:45,360 show you right back out of that go on the long form I'm gonna go into Adobe 15 00:03:45,360 --> 00:03:51,960 Illustrator now right over here this section you're gonna see that this 16 00:03:51,960 --> 00:03:57,600 document has a single layer but it doesn't okay now what I'm gonna show you 17 00:03:57,600 --> 00:04:05,520 is layers think of it like building a cake okay say a pedophore right where you 18 00:04:05,520 --> 00:04:10,260 have layer upon layer upon layer upon layer of cake all right what this 19 00:04:10,260 --> 00:04:15,480 software shows you through Adobe Illustrator is how that cake was built 20 00:04:15,480 --> 00:04:20,700 all right and so it'll show you this was the base layer then there's the next 21 00:04:20,700 --> 00:04:26,700 layer was the next layer okay and it goes through all of the layers all right and 22 00:04:26,700 --> 00:04:32,020 so I'm gonna expand this and as you see this one right here has a lot of stuff in 23 00:04:32,020 --> 00:04:38,400 it okay but it's not just that so this is about 11 different layers but I can go 24 00:04:38,400 --> 00:04:45,000 and break those down further every one of those little arrows drops this into an 25 00:04:45,000 --> 00:04:52,160 expansion and what that gives you when you're looking at it is the forensics of 26 00:04:52,160 --> 00:04:59,040 how this thing was put together okay and so I'm gonna show you now it still looks 27 00:04:59,040 --> 00:05:05,020 like a flat image but every one of these tells you that there is a box or some 28 00:05:05,020 --> 00:05:12,340 content within this structure that was layered in and placed in okay and so 29 00:05:12,340 --> 00:05:21,160 first I'm gonna show you all right this right here if I go in and I take away this 30 00:05:21,160 --> 00:05:25,720 piece right here you shouldn't be able to do that just FYI I shouldn't be able to 31 00:05:25,720 --> 00:05:32,900 select the button and have an entire main part of that content just disappear all 32 00:05:32,900 --> 00:05:36,800 right I mean you could that's what layers are for right so you can turn them on and 33 00:05:36,800 --> 00:05:41,060 off and you can work on just that layer okay but what that does when I do that 34 00:05:41,060 --> 00:05:47,420 that now exposes the fact that a layer has been added okay and how they built this up 35 00:05:47,420 --> 00:05:57,020 right okay now I've selected I've deselected the base image which is just the 36 00:05:57,020 --> 00:06:00,920 the green background that's to make it look like it's an old piece of paper 37 00:06:00,920 --> 00:06:08,660 all right now what you'll notice is that all of this content right here is is no 38 00:06:08,660 --> 00:06:15,440 longer bent that for this piece right here all right and now I'm gonna take 39 00:06:15,440 --> 00:06:19,580 this piece and here's what I want to show you and you're gonna flip okay see this 40 00:06:19,580 --> 00:06:27,140 box right here this box and this box we're pre-existing watermarks associated with the 41 00:06:27,140 --> 00:06:34,820 original document okay what has happened is this document has been pieced together 42 00:06:34,820 --> 00:06:43,040 did you notice that R disappeared there's no R on here okay there are different fonts the K is 43 00:06:43,040 --> 00:06:50,960 missing right this name right here the S is missing there are different fonts all the way across this 44 00:06:50,960 --> 00:06:57,320 that all three of those are different fonts and I'll show you in a minute how bad of a job this was 45 00:06:57,320 --> 00:07:06,440 okay now check this out I'm gonna slide this off my page and then I'm gonna blow it up so that you can 46 00:07:06,440 --> 00:07:12,980 see it right now it's hidden behind me unless I'm gonna read a line now 47 00:07:13,040 --> 00:07:21,320 notice that this these boxes are independent okay that means these these can be these are plug and 48 00:07:21,320 --> 00:07:29,060 play these were put on as a layer right but this piece right here have you noticed it looks like 49 00:07:29,060 --> 00:07:35,440 it's rooster okay get your beak right here you get the little head thing that sticks out like that 50 00:07:35,440 --> 00:07:42,220 little forward feather you got the tail that comes up here right and you got the back of the legs and you 51 00:07:42,220 --> 00:07:48,940 get the claw down here in the foot you got this big chest piece wraps and goes up I want to point 52 00:07:48,940 --> 00:07:54,980 that out because this was something that I looked at I did a blog on this particular document not too 53 00:07:54,980 --> 00:08:00,880 long ago that is the seal of Hawaii okay 54 00:08:00,880 --> 00:08:11,860 any official birth certificate from a state should technically have that seal on I don't see that seal 55 00:08:12,220 --> 00:08:20,260 right so that was a major screw up on their their behalf and not put that seal on there it should 56 00:08:20,260 --> 00:08:25,660 have been watermarked or stamped or something okay not on there probably because they couldn't produce 57 00:08:25,660 --> 00:08:29,740 well you know they could have done they could have they could have photoshopped something and made it 58 00:08:29,740 --> 00:08:40,060 hold that in I mean simple enough but here's what I want to show you look at the rooster and look at that 59 00:08:40,060 --> 00:08:53,720 watermark okay now that is from the tribe of Harambe right which is a Kenyan national tribe from 1960 that 60 00:08:53,720 --> 00:09:01,720 that rooster was facing to the right and then after Kenya became its own nation or our independence 61 00:09:01,720 --> 00:09:10,260 right that rooster went to the left now look at this rooster and look at this you can see it is so 62 00:09:10,260 --> 00:09:20,320 I I think there's something there my opinion is that it was produced 63 00:09:20,320 --> 00:09:29,060 back I think they took an original document and they recreated it based on some original data and 64 00:09:29,060 --> 00:09:34,640 tried to patchwork it in to make it look like an American birth certificate and they faxed they 65 00:09:34,640 --> 00:09:43,260 pulled it together with stuff from Hawaii okay it's a quilt quilt work so now there's that piece of it 66 00:09:43,260 --> 00:09:49,820 okay I'm gonna go back to our document in Adobe Illustrator all right we're gonna back up on this 67 00:09:49,820 --> 00:09:54,660 so here you are here's your chicken this up here I don't really know what in the world that is I haven't 68 00:09:54,660 --> 00:10:01,860 been able to decipher it yet but it's got something I don't know it almost looks like a lion or something 69 00:10:01,860 --> 00:10:10,060 but just remember this was supposedly created 1961 okay and so this you look at the date 63 70 00:10:10,060 --> 00:10:19,320 that that chicken was facing six in 1960 it was facing to the right in 1963 it adopted the lions but 71 00:10:19,320 --> 00:10:25,500 1961 it was all by itself on that little shield and it was a chicken a rooster facing to the left 72 00:10:25,500 --> 00:10:33,420 okay remember that all right so now we're gonna go back into AI and I want to show you I'm gonna I'm 73 00:10:33,420 --> 00:10:40,820 gonna back up this document and we're gonna go into let me peel it back down let me bring it up see 74 00:10:40,820 --> 00:10:49,260 all right I'm gonna select these and I want to show you how this document was built right so notice 75 00:10:49,260 --> 00:11:00,060 that when I deselect this one a lot of a lot of things boxes all these x boxes ticked a lot of 76 00:11:00,060 --> 00:11:09,940 things disappeared right them disappear back on disappear back on now also notice that there are 77 00:11:09,940 --> 00:11:16,140 little letters in between letters that disappear when I do that okay so like right up here where 78 00:11:16,140 --> 00:11:26,060 it says triplet watch watch the letter in in the middle of the P in there no P there's your P okay 79 00:11:26,060 --> 00:11:34,220 all right now there's that one we're going to go here that took away all of our letters 80 00:11:34,220 --> 00:11:46,820 don't understand that one okay here see what that took away that one took away our date 81 00:11:46,820 --> 00:11:52,420 okay there's your date there's your doctor 82 00:11:52,420 --> 00:11:56,860 all right now we're going to go up 83 00:11:56,860 --> 00:12:07,240 notice that this box is floated on there for none type of occupation none okay 84 00:12:07,240 --> 00:12:16,780 notice there is a hard line right here that runs down the edge of that document supposedly 85 00:12:16,780 --> 00:12:27,000 and there's a line right here runs across this okay now if that was all one piece of paper 86 00:12:27,000 --> 00:12:32,860 for one it wouldn't have this piece right here that looks like it's been rolled underneath the copier 87 00:12:32,860 --> 00:12:40,180 a little bit suspect but notice there's some writing out here on the frame 88 00:12:40,180 --> 00:12:46,820 you could have left that that could have been a smudge could have been anything okay but the fact 89 00:12:46,820 --> 00:12:53,900 that what they did was crop it tells me they didn't want to see in that piece for some reason 90 00:12:53,900 --> 00:12:57,280 so they were trying to clean up the document and they just cropped it okay 91 00:12:57,280 --> 00:13:07,000 all right here's your file info camera data so I can go in here and this will actually tell me 92 00:13:07,000 --> 00:13:08,380 they go through 93 00:13:08,380 --> 00:13:21,500 they're pretty clean clean audio data all right so this creation date took place april 27th 2011 94 00:13:21,500 --> 00:13:32,400 7 0 9 a.m 24 seconds okay nothing there photoshop history nothing there 95 00:13:32,400 --> 00:13:45,060 there let's go to raw data all right now take a look at the raw data it tells you the pdf version 1.3 96 00:13:45,060 --> 00:13:52,720 it tells you check out now you guys need to go research this because I did it and it's part of my 97 00:13:52,720 --> 00:14:00,180 blog on this one but that tells you who your creator is right here w3.org in 1999 98 00:14:00,180 --> 00:14:10,060 222 okay that this is all your metadata okay the creator tool that they used 99 00:14:10,060 --> 00:14:21,680 0 4 27 that was the date they modified it they used a mac o operating system 10.6.7 100 00:14:21,680 --> 00:14:28,140 okay using pdf producer okay using pdf producer so they basically x exported the file into that 101 00:14:28,140 --> 00:14:34,100 but all of this stuff gives you all of the data and this is your creator right here this is who made 102 00:14:34,100 --> 00:14:43,640 your document w3.org okay 1999 that's some some poor intern got suckered into that and I guarantee 103 00:14:43,640 --> 00:14:51,040 he was probably 187 when the thing was done okay because he had information that nobody wants to 104 00:14:51,680 --> 00:14:59,000 do that okay now there's that piece remember too that when this individual took office the very 105 00:14:59,000 --> 00:15:04,600 first thing they did was seal their records that was the first executive order don't believe me go 106 00:15:04,600 --> 00:15:10,480 take a look at it first order of business seal my records so that nobody can go pull up anything 107 00:15:10,480 --> 00:15:17,120 to do with my college my education my birth where I was born all the other stuff this was produced by 108 00:15:17,120 --> 00:15:22,840 them okay and given to us because there was such a demand by the American public that they had to 109 00:15:22,840 --> 00:15:30,340 create something all right so now we've got that and what I want to do next is that we saw how it was 110 00:15:30,340 --> 00:15:36,100 quilt worked together we saw how they floated boxes on top of things so I'm going to show you a couple 111 00:15:36,100 --> 00:15:41,700 key things that I think are very important for you to note on this particular document and how you can 112 00:15:41,700 --> 00:15:51,100 see further that it's patched together there is an image if I can pull this over to where you can see 113 00:15:51,100 --> 00:15:58,880 it because it's important that you see this right here in the corner there is a little photo image 114 00:15:58,880 --> 00:16:09,760 right that means that that piece was created using the jpeg or a png or something but that was a 115 00:16:09,760 --> 00:16:17,420 photo picture that was placed into that that's why you got the role right here in that because they 116 00:16:17,420 --> 00:16:24,880 took the picture of the corner of a of a document all right the other piece that's patched together 117 00:16:24,880 --> 00:16:33,820 is right here at the bottom this also is an image right and I'm gonna have to pull it over so you can 118 00:16:33,820 --> 00:16:43,240 notice right here there's that little image icon again okay that my friends is how you got your date 119 00:16:43,240 --> 00:16:52,300 timestamp and this loaded onto it with that older date on it okay they used a picture from another 120 00:16:52,300 --> 00:17:00,700 document put in to the bottom of this it's also why you have this line you can see driving right down 121 00:17:00,700 --> 00:17:11,120 the side here because your birth certificate technically it only be about that size or it's 122 00:17:11,120 --> 00:17:19,140 a full size with this full thing but now think about it you have this role for no clear reason and 123 00:17:19,140 --> 00:17:25,120 you've got this image over here so this whole thing is just a hard line it doesn't match at all 124 00:17:25,120 --> 00:17:31,820 makes no sense that should be completely flat in line with all of this so why they have that curved 125 00:17:31,820 --> 00:17:38,620 shadow document there I have no idea but they're hiding something okay that should not it shouldn't 126 00:17:38,620 --> 00:17:47,200 look like that it should be a flat document okay now next piece microsoft sans serif bold that's on on on 127 00:17:47,200 --> 00:17:57,700 the mom's name so that's one let's go to to this one now look over here the last name times new roman okay 128 00:17:57,700 --> 00:18:10,820 so go down here veranda all right so now we've got times new roman veranda ariel courier 129 00:18:10,820 --> 00:18:23,780 and some sans serif uh some microsoft so what's interesting is that um not only do we have five 130 00:18:23,780 --> 00:18:29,320 different fonts within this one document on this one page with a photo that's been cut off but the 131 00:18:29,320 --> 00:18:34,540 borders that are supposed to make you believe that it was not cut off on the end I don't know how that 132 00:18:34,540 --> 00:18:40,340 even I don't even know how this is possible to have this this line roll and have this hard edge over 133 00:18:40,340 --> 00:18:50,720 here all right really bad job I mean really bad job so now we take that and what I want to show you is 134 00:18:50,720 --> 00:18:58,620 on these fonts this is even bigger giveaway the fact that there are five fonts embedded in this document 135 00:18:58,620 --> 00:19:05,940 that's big enough the fact that it can be manipulated to the point where you can shred it apart and take 136 00:19:05,940 --> 00:19:11,400 it off in chunks and chunks you can see how it was built up in layers that's the other damning 137 00:19:11,400 --> 00:19:17,920 information okay but now the fact that you've got an aerial font design that was created in 1982 138 00:19:17,920 --> 00:19:28,320 which is 19 years past the origination of this document tells me that I mean this is a not just a a 139 00:19:28,320 --> 00:19:34,420 I mean this is completely fraudulent like this is a government document that has been created 140 00:19:34,420 --> 00:19:37,840 and patchworked together 141 00:19:37,840 --> 00:19:51,000 and you've got a rooster watermark that matches very closely to the Kenyan national seal 142 00:19:51,000 --> 00:19:54,880 all right the original back in the day when this thing was supposedly created 143 00:19:54,880 --> 00:20:02,520 in that 1960 63 time frame all right so from a forensic standpoint 144 00:20:02,520 --> 00:20:10,520 if you have this software even even photoshop you can usually get a free photoshop somewhere but if 145 00:20:10,520 --> 00:20:15,840 you have the software this is the adobe creative suite you can actually go in and do a banana peel 146 00:20:15,840 --> 00:20:21,860 on almost any document and it'll not only show you the layers that it was built you can see the edits 147 00:20:21,860 --> 00:20:28,860 that were made and you can go into the properties and find out who originally created that document 148 00:20:28,860 --> 00:20:32,800 i want to show you because i i kind of delved into that and this blog's out here 149 00:20:32,800 --> 00:20:41,420 for anyone that wants to go see it but w3 org was originally created as an internet relay chat room 150 00:20:41,420 --> 00:20:44,500 okay and it was created by the labs at mit 151 00:20:44,500 --> 00:20:53,920 so understand who has been involved with w3 the fingerprints besides mit being on this 152 00:20:53,920 --> 00:21:01,560 all right also you got arpanet that's tied into it which is associated with darpa okay all right now 153 00:21:01,560 --> 00:21:08,220 something to think about here as we look at this w3c realizing that darpa had their fingerprints in 154 00:21:08,220 --> 00:21:15,220 this along with mit and darpa are the ones that created lifelog facebook twitter google instagram 155 00:21:15,220 --> 00:21:21,240 23andme ancestry.com all of the social mass surveillance tool sets that we have today 156 00:21:21,240 --> 00:21:27,520 well hey i hope you guys enjoyed this and i hope it wasn't too lengthy and i hope it didn't go down 157 00:21:27,520 --> 00:21:32,240 too big of a rabbit hole but i just wanted to scratch the surface and show you a little bit about 158 00:21:32,240 --> 00:21:40,360 document forensics so that we can understand what we're looking at in okay that's all i have god bless 159 00:21:40,360 --> 00:21:42,060 monkey out 160 00:22:02,240 --> 00:22:06,300 you