6 ms·
All you have to do is get access to that DB and then you have A1 blackmail material, ready to bury any enemy of yours, specially in America, specially if they h
by ivanca 11y ago
All you have to do is get access to that DB and then you have A1 blackmail material, ready to bury any enemy of yours, specially in America, specially if they have/deal-with children.
- matt_wulfeck 11y agoI know you're being facetious but seriously... what a way to easily ruin someone's life. This system needs reform.
- vinay427 11y ago> what a way to easily ruin someone's life. Isn't that what they're going for? I certainly haven't seen any signs of intent to correct or rehabilitate the convicted for many crimes. The Department of Corrections should just be called the Department of Punishment, in my opinion, though that's perhaps not as catchy.
- sgc 11y agoI found it very interesting that in Italy the corresponding dept is called the "Department of Clemency and Justice".
- baldfat 11y agoThis is 100% true for anyone in IT could ruin anyone they want to. I am shocked the number of people caught doing this is so low but few people realize the power an IT person has.
- matt_wulfeck 11y agoI can't even think of how someone could prevent this type of thing. Even if you kept your own access logs it's doubtful a judge would allow you to use it as evidence.
- SolarNet 11y agoI think, since it's a database of hashes, it's non-reversible. Access to the database gives you nothing but a way to detect the files, and even if a file happens to have the same hash (which would be exceedingly rare) it's easy to see that it's a false positive. Actually a pretty good win for cryptography in fighting the problem (as it doesn't require the illegal material to detect the illegal material - regardless of how irresponsible it is to have a concept of illegal information).
- fareesh 11y agoIf someone were to crop an arbitrary side of the image by 1-2 pixels would that defeat a system like this? Extending that thinking a bit further, would it be trivial to just build out an Apache extension like Google Pagespeed that sort of did this randomly?
- davmre 11y ago"This hash is computed such that it is resistant to alterations in the image, including resizing and minor color alterations." (https://en.wikipedia.org/wiki/PhotoDNA https://en.wikipedia.org/wiki/PhotoDNA)
- fareesh 11y agoThanks!
- gcb0 11y agowhich makes collision with the incrimination intent described above much easier.
- ignoramous 11y agoDeep Neural Nets might solve the problem better than hashes
- devishard 11y agoUgh, this is not how you do crypto. Crypto algorithms have to be understood with regards to what guarantees they provide and in what context. Your approach here is basically ZOMG COLLISIONS ARE BAD when in fact collision-resistance was never a property of this hash function and a collision doesn't provide an attacker with any power they didn't already have. If an attacker has the power to create a non-CP file that has the same hash as a CP file and plant it without detection, they have the power to plant a CP file without detection. Why would they go to the effort to create a collision with a non-CP file? It's wasted effort.
- MertsA 11y agoActually access to that DB wouldn't do much good. It's just the hash of the file, not the file itself.