What I can’t figure out is WHY they are doing the checks on device if it’s only impacting images through apple services like iCloud or iMessage? Why not just do that same check server side and not add some random “backdoor”. All the cloud providers already do the same crap, so why are they moving the check onto devices, are they really lacking compute that much?
in its current iteration, sure it seems quite safe, but it seems pretty easy for china for example to make a law where they control the hash list.
This is pure speculation on my part...
1. Apple doesn't want those images on their servers to begin with.
2. Transmitting those images to Apple's servers would be a separate crime the user has committed. Not that Apple would/should necessarily be concerned. But I have no doubt Apple execs and legal team gamed this out in detail, no doubt with pressure from the government, and this is what they came up with.