5 ms·
don't trust the client. How easy it would be for a motivated community to create a binary patch that skipped the local abuse checks?
by jpadkins 7y ago
don't trust the client. How easy it would be for a motivated community to create a binary patch that skipped the local abuse checks?
- ijpoijpoihpiuoh 7y agoIf we're positing users clever enough to modify the client, then such users could also just modify the client to scramble all CP images so that they would not be detectable via fingerprinting and can only be descrambled by a patched client. People sending CP through whatsapp/FBM are not clever. If they were clever, they wouldn't be doing that. The justice department is not primarily interested in catching clever criminals, at least not via this particular mechanism.
- jknz 7y agoThere are ways to run trusted code on a client using remote enclaves (provided it is supported by the local CPU) https://signal.org/blog/private-contact-discovery/ https://signal.org/blog/private-contact-discovery/
- jandrese 7y agoHow are you going to get a pedo to setup a secure enclave on his box that you control? This is one of those technologies that are cool in theory but almost impossible to implement in practice on current hardware.
- abraae 7y agoWhy bother. Motivated community will just use their own encrypted tech to communicate.