4 ms·

> allow you to compute the hash locally presumably an attacker will just use the local process to observe and develop a method to defeat it. that said, perhap

by abiox 9y ago

> allow you to compute the hash locally presumably an attacker will just use the local process to observe and develop a method to defeat it. that said, perhaps such a methodology would require extra effort on the part of a revenge porn perp, so it might reduce the occurrences.

jacquesm 9y ago
> presumably an attacker will just use the local process to observe and develop a method to defeat it. If they can do that then the whole method fails anyway. Besides, I think the set of your average revenge porn idiots intersected with those that are capable of defeating the hashing scheme in order to do their dirty deed is going to be exceedingly small.
- abiox 9y ago
  > If they can do that then the whole method fails anyway. i'm not that sure. the memory of any application can be observed, which means the process of fingerprinting - whatever it is - can be observed. executing the process enough times with a range of inputs will provide a load of analyzable data, via recording the transformation of bytes. this is (loosely) why basically all software can be "cracked" and drm methods defeated. > intersected with those that are capable of defeating the hashing scheme they don't really have to, much. think of the attackers as software crackers/warez groups, and the perps as visitors to pirate bay. you don't need to know how to break drm to download cracked software, or use nefarious push-button software. there might even be (possibly illicit) business opportunities here.
  - jacquesm 9y ago
    Fair enough, but when weighed against the risk of a FB employee going rogue and making copies of those files or FB 'accidentally' forgetting to wipe your images I'd take my chances on this uber elite perv and would not upload my stuff to FB. This all of course besides the best defense against all of this: do not create such images in the first place and do not allow others to create them.
  - thisacctforreal 9y ago
    Sure, or they could upload to imgur and share with SMS.

by abiox 9y ago

jacquesm 9y ago

> presumably an attacker will just use the local process to observe and develop a method to defeat it. If they can do that then the whole method fails anyway. Besides, I think the set of your average revenge porn idiots intersected with those that are capable of defeating the hashing scheme in order to do their dirty deed is going to be exceedingly small.

abiox 9y ago
> If they can do that then the whole method fails anyway. i'm not that sure. the memory of any application can be observed, which means the process of fingerprinting - whatever it is - can be observed. executing the process enough times with a range of inputs will provide a load of analyzable data, via recording the transformation of bytes. this is (loosely) why basically all software can be "cracked" and drm methods defeated. > intersected with those that are capable of defeating the hashing scheme they don't really have to, much. think of the attackers as software crackers/warez groups, and the perps as visitors to pirate bay. you don't need to know how to break drm to download cracked software, or use nefarious push-button software. there might even be (possibly illicit) business opportunities here.
- jacquesm 9y ago
  Fair enough, but when weighed against the risk of a FB employee going rogue and making copies of those files or FB 'accidentally' forgetting to wipe your images I'd take my chances on this uber elite perv and would not upload my stuff to FB. This all of course besides the best defense against all of this: do not create such images in the first place and do not allow others to create them.
- thisacctforreal 9y ago
  Sure, or they could upload to imgur and share with SMS.