Dear MR Mods:
Please consider moving this political topic to the politics section. It is VERY difficult to discuss security, crime, and criminology without getting ding'd, warned, penalized, or otherwise punished for political discussion. That's because these topics are, at their very root, political in nature.
Thank you your consideration of this request.
Your Flight Plan
It sounds like he was able to get into the system.
Yep!
Will CSAM report my Nirvana Nevermind Album Cover in iTunes?
No, but it WILL grab all of your Disney movies and build a profile identifying you either as an 8 year old girl or somebody with a creepy attraction to kid flicks.
Matthew Green, who teaches cryptography at Johns Hopkins University
BAM! 👊 POW! 💥
But people in here will still side with Apple, unbelievable. 🤦♂️
You must be reading a different thread than I am.
Too much risk is involved. No idea, why Apple is even allowing this in first place.
The fact anyone can reverse engineer. Being able to find the code inside the platform, scary stuff!
I agree.
As this whole scanning thing continues to get more publicity, it’s going to be difficult for customers to not have heard about it by the iPhone 13 release and all the security researchers calling out potentially dangerous flaws is surely going to make the masses have doubt in it. This is beginning to look really bad for Apple.
I fear that nothing will really change until a couple of Senators or Supreme Court justices get busted without due process. Kind of like what happened with the no-fly lists.
I have to ask, how does it feel to be on the other side of the fence now, with a social justice program that you don’t support, being told it’s for the greater good and to just shut up?
Not so great huh?
To whom are you directing this question? "Other side of the fence?" I and many others here have ALWAYS been on the other side of the fence. You seem to think we're all waffling, but I think we're very consistent here.
I would love to see this entire “feature” scrapped but I won’t hold my breath.
Shouldn't you fight it? I mean really, if it's all that bad and a rotten egg too, why wouldn't you fight it?
Again, no one is going to be reported without a human confirming the results. If you don't post CSAM, you won't be reported to NCMEC. Apple isn't reporting anyone to the police or FBI. That isn't their job.
People misreport on other people all the time, and sometimes maliciously so, just to try to have them damaged or jailed in some way! What makes you think it won't happen in technology too? Or do you need to be unjustly jailed as a victim of false reporting without due process before you will learn this for yourself?
And that's why Apple says there's a one in a trillion chance an account will be accidentally flagged and not that it's impossible to be accidentally flagged.
No.
The hashes to scan for are built into iOS.
If a photo is fingerprinted and does not match a known hash then it's ignored.
ONLY if a hash fingerprint match is made is a voucher with the hash and matched photo created, and that voucher doesn't leave your iPhone and no-one can see the contents of the hash (or I think that it even exists) until you get to 30 vouchers and then the entire lot is sent to Apple for validation by automated systems and if that system concurs is sent to an Apple validation team. ONLY of that team sees the images actually are CSAM is the content reported to any form of government.
You say that like you think it won't be misused. Am I right?
How soon before they start deleting spicy political memes?
It has already begun on just about every platform out there. Did you just wake up from a long nap?
I will always criticize Apple for not catching more zero-days. But I just don't understand why this algorithm running on your devices is seen as more susceptible to attack than any other. I think it is likely that it is actually less likely to be hacked given the amount of security and privacy scrutiny it is receiving.
"I think it is likely that it is actually less likely"
Really? Did you REALLY mean to type that?
Your thinking and your likely/notlikely logic is just not good enough for me.
The ironic thing is that if you are ever framed for a crime, you'll
want me on your jury. But you might not even GET a jury, because you'll see no way out through all of the fake but convincing evidence against you, and you'll take your lazy lawyer's advice and plead guilty to a crime you didn't commit.
I mentioned something similar on a previous thread except the threat I pointed out is what happens if a hacker were able to hijack your Apple ID. Remember a few years ago when there were the celebrity iCloud breaches? Never mind that individuals and account security don't really go hand in hand well (passwords and such).
Previously the worst case scenario was that you lost access to your account and purchases. Now you'll have individuals hijacking accounts and holding people for ransom with the threat of uploading kiddie porn via a VPN in their location in order to frame them which would set off the triggers and as you said... reported to the authorities, no recourse and you'd end up in jail with your life ruined. Doesn't even have to be a hacker, could be a revenge actor doing it, etc.
Apple can preach about the tech being sound till the cows come home, but the mechanism behind it stinks of bad actors, potential criminality, and interference.
Yep! Right now they call you as fake IRS agents and tell you they're going to sic the cops on you for not paying your taxes. Can you imagine how rich they'll get if they can fake up some evidence like a hashish and THEN demand money from you?
The remark above seems to be coming from someone who has no idea what they’re talking about.
You seem to be very trusting. That's adorbs!
www.newsweek.com
