6 ms·

So, it’s not that other platforms are any better! Are you sure intel, AMD, Arm or windows TPM aren’t snitching on you? Do we need to make our own silicon from

by eecc 5y ago

So, it’s not that other platforms are any better! Are you sure intel, AMD, Arm or windows TPM aren’t snitching on you? Do we need to make our own silicon from ingot? There’s no technological solution to this problem, only social and legislative.

xattt 5y ago
Is this the real reason why there is the Windows 11 x64 silicon cut-off?
fsflover 5y ago
https://www.crowdsupply.com/sutajio-kosagi/precursor https://www.crowdsupply.com/sutajio-kosagi/precursor
GeekyBear 5y ago
Have people already forgotten that Microsoft implemented the tech to routinely scan your cloud storage a decade ago? >The system that scans cloud drives for illegal images was created by Microsoft and Dartmouth College and donated to NCMEC. The organization creates signatures of the worst known images of child pornography, approximately 16,000 files at present. These file signatures are given to service providers who then try to match them to user files in order to prevent further distribution of the images themselves, a Microsoft spokesperson told NBC News. (Microsoft implemented image-matching technology in its own services, such as Bing and SkyDrive.) https://www.nbcnews.com/technolog/your-cloud-drive-really-private-not-according-fine-print-1c8881731 https://www.nbcnews.com/technolog/your-cloud-drive-really-pr... Didn't the Windows 10 TOS extend that scanning to local storage as well?
- neycoda 5y ago
  I'm OK with software generating signatures from cloud drive images to eliminate child porn pictures and catch pedophiles.
  - AlexandrB 5y ago
    You should read the rest of the linked Twitter thread, because the issue is that if the hash algorithm has a collision vulnerability, any image could be manipulated to show up as "child porn" to the scanner.
    - shuckles 5y ago
      Microsoft created and hosts the PhotoDNA service which all providers use, and PhotoDNA has false positives. All reports are supposed to be manually reviewed before being sent to Cyber Tip.
      - suizi 5y ago
        But, are they? The Swiss federal police weren't too happy about the reports they received from the Cyber Tip.
  - raxxorrax 5y ago
    Have you ever had the impression that special interests are much more interested in copyright violations than child pornography? Or that it might extend to memes that sabotages carefully crafted propaganda? I do have that impression a lot. I don't step in the lowest parts of the internet hell, but I am also not very picky about it. I have never encountered child pornography in 10 years of almost pathological internet usage.
    - GeekyBear 5y ago
      Scanning for DRM violations was one of the use cases mentioned in the article linked above.
      - raxxorrax 5y ago
        I didn't know what CSAM stood for so I first though this would be the reaction to the security issues iPhones faced. Oh, silly me. Additionally, by calculating hashes of media on peoples devices, you can quickly determine networks. A private image you shared with your friends? Unique hash and everyone that has it is probably in your network. That is aside from the issue that they would also just read your contacts.
gruez 5y ago
>windows TPM aren’t snitching on you? The TPM FUD has really gone out of hand. 1. there's no such thing as "windows TPMs", whatever that means. 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.
- warkdarrior 5y ago
  > 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it. That's the specification. Have you actually monitored the bus using probes? Did you check that the TPM is only connected to LPC?
  - gruez 5y ago
    >Have you actually monitored the bus using probes Isn't this the definition of FUD? >Did you check that the TPM is only connected to LPC? Dunno, you tell me. https://en.wikipedia.org/wiki/File:TPM_Asus.jpg https://en.wikipedia.org/wiki/File:TPM_Asus.jpg

by eecc 5y ago

xattt 5y ago

Is this the real reason why there is the Windows 11 x64 silicon cut-off?

fsflover 5y ago

https://www.crowdsupply.com/sutajio-kosagi/precursor https://www.crowdsupply.com/sutajio-kosagi/precursor

GeekyBear 5y ago

Have people already forgotten that Microsoft implemented the tech to routinely scan your cloud storage a decade ago? >The system that scans cloud drives for illegal images was created by Microsoft and Dartmouth College and donated to NCMEC. The organization creates signatures of the worst known images of child pornography, approximately 16,000 files at present. These file signatures are given to service providers who then try to match them to user files in order to prevent further distribution of the images themselves, a Microsoft spokesperson told NBC News. (Microsoft implemented image-matching technology in its own services, such as Bing and SkyDrive.) https://www.nbcnews.com/technolog/your-cloud-drive-really-private-not-according-fine-print-1c8881731 https://www.nbcnews.com/technolog/your-cloud-drive-really-pr... Didn't the Windows 10 TOS extend that scanning to local storage as well?

neycoda 5y ago
I'm OK with software generating signatures from cloud drive images to eliminate child porn pictures and catch pedophiles.
- AlexandrB 5y ago
  You should read the rest of the linked Twitter thread, because the issue is that if the hash algorithm has a collision vulnerability, any image could be manipulated to show up as "child porn" to the scanner.
  - shuckles 5y ago
    Microsoft created and hosts the PhotoDNA service which all providers use, and PhotoDNA has false positives. All reports are supposed to be manually reviewed before being sent to Cyber Tip.
    - suizi 5y ago
      But, are they? The Swiss federal police weren't too happy about the reports they received from the Cyber Tip.
- raxxorrax 5y ago
  Have you ever had the impression that special interests are much more interested in copyright violations than child pornography? Or that it might extend to memes that sabotages carefully crafted propaganda? I do have that impression a lot. I don't step in the lowest parts of the internet hell, but I am also not very picky about it. I have never encountered child pornography in 10 years of almost pathological internet usage.
  - GeekyBear 5y ago
    Scanning for DRM violations was one of the use cases mentioned in the article linked above.
    - raxxorrax 5y ago
      I didn't know what CSAM stood for so I first though this would be the reaction to the security issues iPhones faced. Oh, silly me. Additionally, by calculating hashes of media on peoples devices, you can quickly determine networks. A private image you shared with your friends? Unique hash and everyone that has it is probably in your network. That is aside from the issue that they would also just read your contacts.

gruez 5y ago

>windows TPM aren’t snitching on you? The TPM FUD has really gone out of hand. 1. there's no such thing as "windows TPMs", whatever that means. 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.

warkdarrior 5y ago
> 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it. That's the specification. Have you actually monitored the bus using probes? Did you check that the TPM is only connected to LPC?
- gruez 5y ago
  >Have you actually monitored the bus using probes Isn't this the definition of FUD? >Did you check that the TPM is only connected to LPC? Dunno, you tell me. https://en.wikipedia.org/wiki/File:TPM_Asus.jpg https://en.wikipedia.org/wiki/File:TPM_Asus.jpg