4 ms·
"This hash is computed such that it is resistant to alterations in the image, including resizing and minor color alterations." (https://en.wikipedia.org/wiki/Ph
by davmre 11y ago
"This hash is computed such that it is resistant to alterations in the image, including resizing and minor color alterations."
(https://en.wikipedia.org/wiki/PhotoDNA https://en.wikipedia.org/wiki/PhotoDNA)
- fareesh 11y agoThanks!
- gcb0 11y agowhich makes collision with the incrimination intent described above much easier.
- ignoramous 11y agoDeep Neural Nets might solve the problem better than hashes
- devishard 11y agoUgh, this is not how you do crypto. Crypto algorithms have to be understood with regards to what guarantees they provide and in what context. Your approach here is basically ZOMG COLLISIONS ARE BAD when in fact collision-resistance was never a property of this hash function and a collision doesn't provide an attacker with any power they didn't already have. If an attacker has the power to create a non-CP file that has the same hash as a CP file and plant it without detection, they have the power to plant a CP file without detection. Why would they go to the effort to create a collision with a non-CP file? It's wasted effort.
- khc 11y agoSo that they don't need to obtain a copy of the image in the first place? Also a much lesser crime if they get caught.
- DanBC 11y agoBob is found with a file of pseudo random data that matches a hash on the database. There's no evidence of other images of child sexual abuse on his machine; there's no history of sites that distribute images of child sexual abuse; there's no history of the file being opened by Bob; Bob claims that he didn't know the file was there and he doesn't know what it is. How does that benefit an attacker? How does that benefit an attacker more than just taking actual images of child sexual abuse and putting those on Bob's computer?
- mdpopescu 11y agoI don't know the laws in the US; is the police obligated to respond if someone warns them of this event? (Bob has a file matching a "bad hash".) How seriously - will there be a polite guy knocking on the door, or a SWAT team at 3 am? If nothing is found, and another such event occurs next month, will they have to check again? People can come up with crazy scenarios for anything :)
- voxic11 11y agoIn the USA police are not obligated to do anything really. See https://en.m.wikipedia.org/wiki/Warren_v._District_of_Columbia https://en.m.wikipedia.org/wiki/Warren_v._District_of_Columb... >"[t]he duty to provide public services is owed to the public at large, and, absent a special relationship between the police and an individual, no specific legal duty exists."
- dpark 11y agoThat's not how this works. When a service provider detects a match, they send the file when they report the match. They don't just say "hey, some file matched this hash" and then SWAT kicks down the door, because that would be stupid. They send the file, NCMEC looks at it, and then forwards it to law enforcement who also looks at it. If it's a random file that happens to collide, NCMEC won't send it to law enforcement, and if they did, law enforcement wouldn't act on it.
- 11y ago