Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
The main goal is to make sure Apple doesn’t get CSAM on its servers, so i don’t know why Apple doesn’t just do what Google, Facebook, etc do and just scan the photos in the cloud. That way if you don’t use iCloud, your stuff never gets scanned on device or off device.

By doing it this way, they can continue to make the claim that they can't access your stuff. Your iCloud photos are technically encrypted - they just hold the keys. By doing it this way, they don't have to decrypt anything in iCloud as they're receiving the malicious "package" in its own "safety voucher" package. Yes, they'll have to review that, but not at the expense of decrypting any other iCloud photos.

I'm not saying that makes it any better. But from their standpoint, where they want to die on the hill of "we can't access your stuff!", I can see some logic behind it.
 
Those banks can actually be held liable for things in your digital account though. Like if you deposit over $9,000 and they don't report it to the government they are liable for suspected money laundering. The safety deposit box is a bit different obviously.
That relates to taxes, which is a whole other ball of wax. But yes, I could potentially store millions in my box, and no one would or should know but me.

I do think they should use end-to-end encryption with keys stored on our own devices only for iCloud but that's a wish they seem unwilling to entertain.
Yeah, this is all academic. They're going to do whatever they want, and we'll just have to put up with it or go off-grid.
 
  • Like
Reactions: DblHelix
One thing that has yet to be detailed is how this will affect my phone performance and battery life. I assume if computational analysis is happening on my phone both will take a hit.

Depends on how often it happens. I suspect battery performance degradation will be mice nuts. Unless you're constantly adding photos to your phone. It's a duty cycle thing.
 
  • Like
Reactions: DblHelix
From the interview, the actual mechanism in place to scan photos doesn’t seem that bad (using hashes and needing 30 hashes to form a match — not actually viewing photos on your phone when they’re being uploaded to iCloud). Is the concern around this being abused by corrupt governments around the world? I’m just trying to understand in which ways this can be abused by authorities around the world.
 
  • Like
Reactions: ikir and VTECaddict
What Apple should do since there is so much confusion they caused is postpone this feature; as they call it; until iOS 16. Problem solved.

The more they talk about it the worse it’s going to get in the public eye.
 
  • Like
Reactions: DblHelix
By doing it this way, they can continue to make the claim that they can't access your stuff. Your iCloud photos are technically encrypted - they just hold the keys. By doing it this way, they don't have to decrypt anything in iCloud as they're receiving the malicious "package" in its own "safety voucher" package. Yes, they'll have to review that, but not at the expense of decrypting any other iCloud photos.

I'm not saying that makes it any better. But from their standpoint, where they want to die on the hill of "we can't access your stuff!", I can see some logic behind it.
But if one of your photos is flagged under this new system, an Apple employee will be able to see the photo (indeed a low quality version) before it is even uploaded to iCloud. So they have no right, to make such a claim.
 
  • Like
Reactions: Evil Lair
For sure, nothing. I was using it as an example of what the rest of the world will want to do with well known images of people fighting for freedom and having lost it in China.

I think that China probably already has the Apple encryption keys for the servers in China. Likewise, it wouldn't surprise me if they were available for the US and other country's servers too, just not publicized.

My argument is why government would use a cumbersome way to do their bidding when something already exists which are much easier for them to use?

If the Chinese wants to catch dissidents it would be much better to get all their iCloud data instead of trying to catch someone because they saved 30 or more "famous" photos.
 
  • Like
Reactions: VTECaddict
users who like to use CSAM will move to Android
users who are into "signal app" level of privacy will not use iPhones
Apple loyal fanbase who don't use CSAM will stay on iPhones.

in summary
 
  • Like
Reactions: ikir
Basically he’s saying no human is looking at your photos unless the images match the images it‘s searching for….
 
So someone who looks a child porn photos stops using iCloud Photos. What about the rest of us who want privacy? What future governmental interference?
good point. The rule breakers are free to move on while the rule followers are stuck with this.

Kinda like the people who refuse to get vaccine shots and the rest of us who did now have to put masks back on.
 
That's handled by NCMEC. They have been doing this for at least 20 years I believe.
Employees working for them know what they're getting into or are at least warned.
I know, but I still wouldn't want to be one of them.
 
  • Like
Reactions: ikir
Thank you, Craig! I wonder if Craig woke up and read my comment from the previous article haha!


All jokes aside! Craig, you do not know what you are talking about when all you did was praise how important privacy was. Stay away from my PRIVACY, please. It is my HUMAN RIGHT. Craig! please, give us an Opt-Out option from CSAM, please. Let our voices be heard. I will not appreciate Apple scanning my iCloud photos whether it's through AI or Hash.

It sounds like Apple is using "Protecting Children" as an example to be spying on the consumers.

STOP this mass surveillance to be launched. Apple you are not a Law Enforcement organization. Stop acting like one. Apple, how are you not getting the point. You are violating our privacy. Over 7000 signatures were collected. Stop playing with our privacy and human right.

Opt-out is no sense since someone who abuse child will simply opt-out.
 
  • Like
Reactions: hagjohn
My argument is why government would use a cumbersome way to do their bidding when something already exists which are much easier for them to use?

If the Chinese wants to catch dissidents it would be much better to get all their iCloud data instead of trying to catch someone because they saved 30 or more "famous" photos.
Exactly. If China or Russia wants to do surveillance they’ll just directly decrypt and look at someone’s entire iCloud data because they already have access to the servers in their country and not have rely on this convoluted system to report suspected matched images.
 
But if one of your photos is flagged under this new system, an Apple employee will be able to see the photo (indeed a low quality version) before it is even uploaded to iCloud. So they have no right, to make such a claim.

Yeah but they'd be able to see ALL of them on iCloud. This limits them to only being able to see the ones that are flagged without decrypting anything on iCloud. They'd have to decrypt your entire iCloud library to do the scanning there. This keeps them from having to do that...

Again, I still don't know if I like that any better. But that's the logic behind it. A lot of people are theorizing that this will allow them to make iCloud fully E2EE, without them having any keys. But I still don't know if it's worth it.
 
  • Like
Reactions: VTECaddict
If scanning on servers, you can never have end-to-end encryption. Also it's easier to find out what's happening on phones than on servers.
How is it easier? How are you going to audit this as part of iOS/iPad? Apple has iOS locked down, to include this monitoring.
 
One thing I’m watching for in the tech community at large: with everyone carrying a powerful computer in their pocket, how many other tasks can be pushed onto the end user instead of computed/stored in a datacenter?

In this instance, Apple is letting you and your phone foot the bill for computing and power consumption (to self incriminate!). What other services or functions can and will be moved from the server to the end-user? It is undoubtedly saving Apple money.
 
Again, I still don't know if I like that any better. But that's the logic behind it. A lot of people are theorizing that this will allow them to make iCloud fully E2EE, without them having any keys. But I still don't know if it's worth it.
This will help Apple sells a boatload more of their devices if they are able to achieve that, and I believe they are heading in that direction.
 
I really don't get the argument that scanning on the device is more private than doing the scan part in iCloud on Apples server.
My three major thoughts are:

a) Now you get the ability to compare pictures you upload to iCloud to the CSAM database on millions of devices. This technology will attract the interest of law enforcement agencies, governments etc.
b) It makes no sense that the scanning part is done locally when your pictures aren't end to end encrypted in iCloud photos. Apple could do the scanning in the cloud, because Apple can access your cloud data anyway.
c) It would make no sense to do the scanning part locally if iCloud photos would be end to end encrypted. Because in this case Apple had no access.
 
My argument is why government would use a cumbersome way to do their bidding when something already exists which are much easier for them to use?

If the Chinese wants to catch dissidents it would be much better to get all their iCloud data instead of trying to catch someone because they saved 30 or more "famous" photos.
And if Apple announced that it was scanning iCloud photos for CSAM, there would be a lot less outrage.

But the fact they went through hoops instead of implementing that...seems suspicious.
 
  • Like
Reactions: PBG4 Dude
Child porn is despicable, but so is surveillance like this. If they start scanning for porn, you can be sure that governments like China will insist that Apple and others use the same technology to scan for other images and data they do not approve of. In fact the USA's own NSA would want to tag on. A scary proposition.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.