4 ms·

Apple insists that Safari doesn't reveal a different bit of information, the webpages Safari users visit Insists how? Was there a public statement? A p

Apple insists that Safari doesn't reveal a different bit of information, the webpages Safari users visit Insists how? Was there a public statement? A phone call? With whom? An email? From whom? Is it normal journalism to just say "Company X says ..." without stating who of the company stated it and how? If it is true what the article claims, that they give hashes to Tencent, then this statement is false: Apple insists that Safari doesn't reveal a different bit of information, the webpages Safari users visit. Because a hash is an id for a set of pages. That is not what you mean when you say it doesn't reveal the pages.

filleduchaos 7y ago
> If it is true what the article claims, that they give hashes to Tencent, then this statement is false Is today really the first day all of y'all are hearing about Safe Browsing and how it works? The _prefix_ of the hash is sent to the blacklist service, not the entire thing.
- TicklishTiger 7y ago
  The prefix is just a shorter hash. It specifies a set of urls. The urls that have a hash which begins with that prefix.
  - filleduchaos 7y ago
    > The prefix is just a shorter hash With all due respect, this makes no sense whatsoever. You can't make any meaningful conclusion (in isolation, or even with small enough/random enough datasets) about the content that was hashed from only a part of the resultant hash, that's the whole point of how hashing works.
LeoPanthera 7y ago
> Insists how? Was there a public statement? A phone call? With whom? An email? From whom? Before bitching, actually read the article. "In a statement emailed to The Register (!), an Apple spokesperson said:"
lordlimecat 7y ago
It gives a 32-bit hash prefix (derived from Sha256) for a subset of URLs that matched a local database of suspicious prefixes. Those prefixes are used to request the provider send a list of malicious sha256 hashes with that prefix.

filleduchaos 7y ago

> If it is true what the article claims, that they give hashes to Tencent, then this statement is false Is today really the first day all of y'all are hearing about Safe Browsing and how it works? The _prefix_ of the hash is sent to the blacklist service, not the entire thing.

TicklishTiger 7y ago
The prefix is just a shorter hash. It specifies a set of urls. The urls that have a hash which begins with that prefix.
- filleduchaos 7y ago
  > The prefix is just a shorter hash With all due respect, this makes no sense whatsoever. You can't make any meaningful conclusion (in isolation, or even with small enough/random enough datasets) about the content that was hashed from only a part of the resultant hash, that's the whole point of how hashing works.

LeoPanthera 7y ago

> Insists how? Was there a public statement? A phone call? With whom? An email? From whom? Before bitching, actually read the article. "In a statement emailed to The Register (!), an Apple spokesperson said:"

lordlimecat 7y ago

It gives a 32-bit hash prefix (derived from Sha256) for a subset of URLs that matched a local database of suspicious prefixes. Those prefixes are used to request the provider send a list of malicious sha256 hashes with that prefix.