Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I'd imagine the tech savvy predators wouldn't be storing their albums of filth in the cloud anyway. So regardless of what Apple was planning, it wouldn't be an end to anything.

My understanding from what I've read is that these people tend to store & share images and videos with other like-minded individuals on websites, so the real effort needs to go into taking these sites down. But as soon as you shut one down, another 10 pop up. Just like the efforts to combat piracy. The criminals are always way ahead of authorities.

But how do you police the transmission of every photo & video on the internet, particularly on encrypted websites? You can't.

You make a great point.
The internet is like society. It has good and bad. The bad need to be found and prosecuted. What we don’t need and it should not happen (speaking only for the US) is trampling on legal rights in an effort to nab these folk.
Not an easy job at all.
 
  • Like
Reactions: BurgDog
While this is how this "feature" is described, I just don't want this sort of spyware on a device I paid for.
The Pegasus hack debacle has shown that iOS isn't necessarily secure.
Apple want's to prevent CSAM loaded to iCloud, so they should scan in iCloud – and only there.
That’s my point. The on-device software needs iCloud to function. It can’t do anything on its own.
 
That’s my point. The on-device software needs iCloud to function. It can’t do anything on its own.
You keep repeating this falsehood. It doesn't "need" iCloud. It runs entirely on the local device. It's simply currently configured to operate only if photos are destined for iCloud. That aspect of its operation could easily be determined with nothing more than a software flag, where flipping the flag, or "switch", would enable it to scan regardless of iCloud photo backup/sharing.

That software switch need not even reside on the local device.
 
last think I need is Chris Hanson knocking at my door cause i have cute photos of my new born children taking a bath...
No worries there….just breathe and relax. Hanson is washed up. His show was chopped because of allegations of entrapment and harassment. He also got evicted from his home and charged with writing thousands of dollars worth of counterfeit checks - not once but twice.
 
  • Haha
Reactions: blacktape242
You keep repeating this falsehood. It doesn't "need" iCloud. It runs entirely on the local device. It's simply currently configured to operate only if photos are destined for iCloud. That aspect of its operation could easily be determined with nothing more than a software flag, where flipping the flag, or "switch", would enable it to scan regardless of iCloud photo backup/sharing.

That software switch need not even reside on the local device.
But your phone has no idea if somethings a match or not. It’s completely blind. The only way to tell if something is a match is to upload it to iCloud. That’s how it works. That’s why the system does absolutely nothing if you have iCloud Photo Library turned off. Without uploading the vouchers, the phone itself can’t tell if there’s a match or not.
 
If nothing else start watching from point 17:00.
That was worthwhile. Thanks for posting!

A couple quotes stuck out, for me:

"As an ACLU member I feel very, very strongly about free speech. But I also feel very strongly about hate speech and about misinformation." -- Larry Magid

No, Mr. Magid, it doesn't work that way. You can't legitimately claim you're "very, very" supportive of free speech, then turn around and claim, in the same breath, you support limiting free speech based upon some arbitrary classifications of it being "hate" speech or "misinformation."

(As an aside: This is an example of why I'm neither a member of or contribute to, the ACLU. Mr. Magid's statement is reflective of why many civil libertarians refer to it as the ASCLU: American Some Civil Liberties Union. They support civil liberties of which they approve, exercised in the manners in which they approve.)

The other one that particularly struck home, for me, as it relates directly back to our exodus from the Apple ecosystem and the "toothpaste of distrust," was:

"Apple showed that ... it didn't really care as much about the privacy. [When] you start to peel back the layers a little bit, you see that [Apple] isn't really the big angel that it makes itself out to be. And that's, I think, what's being exposed in this moment." -- Alex Kantrowitz

IOW: The king has no clothes.

But your phone has no idea if somethings a match or not. It’s completely blind. The only way to tell if something is a match is to upload it to iCloud.
You're conflating two things: What it does and what it's capable of doing. They are not the same thing. Perhaps you really don't grasp the difference? It currently does not scan unless iCloud photo sharing is enabled. But there's nothing to prevent it from doing so, as it is not dependent upon iCloud, as you suggested. iCloud could exist not at all and it could still function.

You may regard that as a distinction without a difference, but, to those of use who object to on-device scanning, that is the difference.
 
Here is what, I think, you're failing to understand. The internet is a virtual gateway to real world--and psychological-- harm. There are things he can see that will damage his mind. There are people out there, ready to pray on him. And as a parent, it's your job to protect him from that sort of thing. Because once he sees it, or once he is prayed on, it's too late. The damage is done. There is no fixing it. No going back.
That all happens without the internet...
 
Help me out, is that supposed to be some kind of burn? If so, I dont get it.

All I was saying is that now that he's in a position where he (by association) 'represents' macrumors staff, he should be more careful about how he responds to people since many of us will interpret his comments as representing Macrumors.

So, when he makes a post like that, a post that effectively has no other intent than to be confrontational, that reflects on Macrumors.
That particular poster has always had that attitude, also an attitude of elitism over Android users.
 
  • Like
Reactions: Nicole1980
That was worthwhile. Thanks for posting!

A couple quotes stuck out, for me:

"As an ACLU member I feel very, very strongly about free speech. But I also feel very strongly about hate speech and about misinformation." -- Larry Magid

No, Mr. Magid, it doesn't work that way. You can't legitimately claim you're "very, very" supportive of free speech, then turn around and claim, in the same breath, you support limiting free speech based upon some arbitrary classifications of it being "hate" speech or "misinformation."

(As an aside: This is an example of why I'm neither a member of or contribute to, the ACLU. Mr. Magid's statement is reflective of why many civil libertarians refer to it as the ASCLU: American Some Civil Liberties Union. They support civil liberties of which they approve, exercised in the manners in which they approve.)

The other one that particularly struck home, for me, as it relates directly back to our exodus from the Apple ecosystem and the "toothpaste of distrust," was:

"Apple showed that ... it didn't really care as much about the privacy. [When] you start to peel back the layers a little bit, you see that [Apple] isn't really the big angel that it makes itself out to be. And that's, I think, what's being exposed in this moment." -- Alex Kantrowitz

IOW: The king has no clothes.


You're conflating two things: What it does and what it's capable of doing. They are not the same thing. Perhaps you really don't grasp the difference? It currently does not scan unless iCloud photo sharing is enabled. But there's nothing to prevent it from doing so, as it is not dependent upon iCloud, as you suggested. iCloud could exist not at all and it could still function.

You may regard that as a distinction without a difference, but, to those of use who object to on-device scanning, that is the difference.
The device is capable of a lot of things that it doesn’t do. That doesn’t mean it’s going to do those things haha. Just because it’s capable doesn’t mean anything to me.

Heck, it’s capable of listening and uploading everything you say, and it even does speech to text so Apple could technically listen for anything they want and alert someone when they hear something illegal. Ever thought of that? I mean, if you disable Siri, it doesn’t delete it, so how do you even know it’s disabled??

There’s lots of theories we could get into, but that doesn’t make it “fact” so I’m being a realist and I’m only going by “what it is” not “what it could be”.
 
  • Like
Reactions: mw360
There’s lots of theories we could get into, but that doesn’t make it “fact” ...
No, what makes it a fact is that it is, in reality a fact: The on-device CSAM scanner no more depends upon iCloud than an archer needs a target to release an arrow. It also appears to be a fact you're either unable, or unwilling, either to understand or to concede that fact.

In the latter case you'd be arguing in bad faith, which is what I'm beginning to strongly suspect is the case.
 
  • Like
Reactions: Pummers and PC_tech
No, what makes it a fact is that it is, in reality a fact: The on-device CSAM scanner no more depends upon iCloud than an archer needs a target to release an arrow. It also appears to be a fact you're either unable, or unwilling, either to understand or to concede that fact.

In the latter case you'd be arguing in bad faith, which is what I'm beginning to strongly suspect is the case.
It does depend on iCloud to work. That is a fact.
 
You're conflating two things: What it does and what it's capable of doing. They are not the same thing. Perhaps you really don't grasp the difference? It currently does not scan unless iCloud photo sharing is enabled. But there's nothing to prevent it from doing so, as it is not dependent upon iCloud, as you suggested. iCloud could exist not at all and it could still function.

You may regard that as a distinction without a difference, but, to those of use who object to on-device scanning, that is the difference.
You are actually wrong about this. Apple isn’t just running through a list of hashes to see if one matches and then choosing whether on not to dial home based on a ‘flag’. They are running the matching process entirely as a cryptographic technique, only part of which runs on the phone. The phone’s software cannot know whether the process yields a match. Also the phone does not ever have the CSAM hashes in a readable format either, so even if some sidecar code were secretly added to do a trivial match test outside of the encrypted computation, it wouldn’t be able to interpret the DB. (That’s an essential part of Private Set Intersection).

To unlock the flagged images Apple has to go through a decryption technique across your entire library, which appears to be quite computationally expensive, and also requires keys only stored at Apple. That part runs on iCloud, and that’s why the system is impotent if you don’t upload to iCloud. Almost all of the ’technology’ in Apples system is focussed on how to double blind the whole process like this so they can’t just take a peek when they feel like it. Yes, they could change it one day to the thing you fear, but they would have to change it to something completely different from what it currently is, which they could do with any of a thousand other process which actually do ‘scan your phone’ without nearly so much scrutiny.
 
You are actually wrong about this. Apple isn’t just running through a list of hashes to see if one matches and then choosing whether on not to dial home based on a ‘flag’.
My point is the initial scanning takes place entirely on the device:
Before an image is stored in iCloud Photos, an on-device matching process is performed for that image against the database of known CSAM hashes. This matching process is powered by a cryptographic technology called private set intersection, which determines whether there is a match without revealing the result. The device creates a cryptographic safety voucher that encodes the match result. It also encrypts the image’s NeuralHash and a visual derivative.
Ref: CSAM Detection: Technical Summary

Yes: The entire process requires off-device mechanisms. Few here have argued that. The point is the scanner is on-device. That is the crux of the objections.

Yes, they could change it one day to the thing you fear, ...
They're already planning to do a thing I fear. I don't have to wait for "one day."
 
  • Like
Reactions: dk001 and Pummers
They check their pictures before I upload them with their database installed ON MY iphone. I don't care what else might happen on their server I care what happens on my phone without my knowledge.
Time to unplug and get rid of your devices and internet connection.
 
My point is the initial scanning takes place entirely on the device:
Well, no, your point was that the scanner does not depend on iCloud and could function without it and that this is a fact, it’s scary and and that people claiming otherwise were lying. I would say a ‘scanner’ that can produce no useable scan data without an iCloud counterpart, depends on iCloud. If you see it differently then we’re either playing semantics with ‘scanner’ and ‘depends’ or we’re deep into ‘tree falls in a forest’, both of which are totally fine if discussed honestly, but it would be a bit weird to call anyone who disagrees a liar.
 
  • Love
Reactions: januarydrive7
Well, no, your point was that the scanner does not depend on iCloud and could function without it ...
The scanner does not and can, but...

If you see it differently then we’re either playing semantics with ‘scanner’ and ‘depends’ or we’re deep into ‘tree falls in a forest’, both of which are totally fine if discussed honestly, but it would be a bit weird to call anyone who disagrees a liar.
I concede your first point, but I take issue with my calling him a liar. I suggested he either misunderstood the objection or was arguing in bad faith. I came to the conclusion it was the latter.

Anyway, we're going to have to agree to disagree on the threat this new on-device scanner represents.
 
  • Like
Reactions: PC_tech
As does every other major operating system. Even your local library does this with books. It’s called Indexing.
If your point is that, if Apple were antagonistic towards privacy, that they could use their existing indexing (and other semantic-tagging) methods with much better precision, then yep --- I agree.

If you're just pointing out that it's called indexing, then let me clarify the point I was making: if you (or others here) are worried about Apple using the CSAM-scanning technique for espionage purposes--either willfully or under coercion--then you've got it all wrong.

As you've so obviously pointed out, every major operating system, including iOS, indexes all data on your devices, and oftentimes the semantic tagging is quite sophisticated (search for pictures with Winnie-the-Pooh). In short: any reasonable/likely approach to spying on you would ignore the CSAM technique, as it's quite hamstrung in what it could actually do, and would require a lot of effort to get it to work as a general-purpose scanner; instead it would simply return what is already semantically tagged with the item(s) of interest.

Someone here sarcastically mentioned it being time to unplug all devices. If the CSAM technique represents a real threat to anyone here, then, despite the sarcasm, it might actually be a good idea.
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.