4 ms·

No it’s not. Read the article: the proposed mechanism is implemented as part of photo upload to iCloud.

by shuckles 5y ago

cm2187 5y ago
The title says "scan US phones", the article is behind a paywall.
- shuckles 5y ago
  https://archive.is/https://www.ft.com/content/14440f81-d405-452f-97e2-a81458f5411f https://archive.is/https://www.ft.com/content/14440f81-d405-...
  - cm2187 5y ago
    Thanks. The article confirms the title, this is not about content uploaded to the cloud: Apple’s system is less invasive in that the screening is done on the phone, and “only if there is a match is notification sent back to those searching”, said Alan Woodward, a computer security professor at the University of Surrey. “This decentralised approach is about the best approach you could adopt if you do go down this route.”
    - __blockcipher__ 5y ago
      https://twitter.com/matthew_d_green/status/1423109002280513540 https://twitter.com/matthew_d_green/status/14231090022805135... and https://twitter.com/matthew_d_green/status/1423109458293628931 https://twitter.com/matthew_d_green/status/14231094582936289... kind of sums it up. Clearly there is an intent to progress to more than just what's been shared with iCloud. Otherwise there'd be no need for software on the devices themselves at all.
      - shuckles 5y ago
        That is not the only explanation. Involving the device could be considered better because it doesn’t require Apple to build infrastructure to scan all your photos in the cloud, which could be more easily repurposed without user consent.
        pseudalopex 5y ago
        They scan photos in the cloud now. And do you think Apple will announce and let users opt out of client side scanning changes?
        shuckles 5y ago
        As far as is publicly known, only iCloud Mail was being scanned before this announcement. This is consistent with the lack of overall CyberTip reports from Apple historically (orders of magnitudes lower than comparable platforms).
        pseudalopex 5y ago
        Articles said Apple scanned iCloud photos last year. I see some of them were updated to be less specific.
      - Terretta 5y ago
        The slant I took from that thread is this is the way to comply with known-bad-hash matching requirement while preserving E2E encryption for cloud-stored content: checking hash at an end. Don’t need to MITM when you put an M at an end.
        pseudalopex 5y ago
        iCloud photos aren't E2E encrypted now. This could be a way to add E2E encryption while preserving the current level of surveillance. Except the article said Apple can decrypt suspect photos. And it isn't a legal requirement apparently.[1] [1] https://news.ycombinator.com/item?id=28077619 https://news.ycombinator.com/item?id=28077619
    - shuckles 5y ago
      > According to people briefed on the plans, every photo uploaded to iCloud in the US will be given a “safety voucher” saying whether it is suspect or not. Once a certain number of photos are marked as suspect, Apple will enable all the suspect photos to be decrypted and, if apparently illegal, passed on to the relevant authorities.

No it’s not. Read the article: the proposed mechanism is implemented as part of photo upload to iCloud.

cm2187 5y ago

The title says "scan US phones", the article is behind a paywall.

shuckles 5y ago
https://archive.is/https://www.ft.com/content/14440f81-d405-452f-97e2-a81458f5411f https://archive.is/https://www.ft.com/content/14440f81-d405-...
- cm2187 5y ago
  Thanks. The article confirms the title, this is not about content uploaded to the cloud: Apple’s system is less invasive in that the screening is done on the phone, and “only if there is a match is notification sent back to those searching”, said Alan Woodward, a computer security professor at the University of Surrey. “This decentralised approach is about the best approach you could adopt if you do go down this route.”
  - __blockcipher__ 5y ago
    https://twitter.com/matthew_d_green/status/1423109002280513540 https://twitter.com/matthew_d_green/status/14231090022805135... and https://twitter.com/matthew_d_green/status/1423109458293628931 https://twitter.com/matthew_d_green/status/14231094582936289... kind of sums it up. Clearly there is an intent to progress to more than just what's been shared with iCloud. Otherwise there'd be no need for software on the devices themselves at all.
    - shuckles 5y ago
      That is not the only explanation. Involving the device could be considered better because it doesn’t require Apple to build infrastructure to scan all your photos in the cloud, which could be more easily repurposed without user consent.
      - pseudalopex 5y ago
        They scan photos in the cloud now. And do you think Apple will announce and let users opt out of client side scanning changes?
        shuckles 5y ago
        As far as is publicly known, only iCloud Mail was being scanned before this announcement. This is consistent with the lack of overall CyberTip reports from Apple historically (orders of magnitudes lower than comparable platforms).
        pseudalopex 5y ago
        Articles said Apple scanned iCloud photos last year. I see some of them were updated to be less specific.
    - Terretta 5y ago
      The slant I took from that thread is this is the way to comply with known-bad-hash matching requirement while preserving E2E encryption for cloud-stored content: checking hash at an end. Don’t need to MITM when you put an M at an end.
      - pseudalopex 5y ago
        iCloud photos aren't E2E encrypted now. This could be a way to add E2E encryption while preserving the current level of surveillance. Except the article said Apple can decrypt suspect photos. And it isn't a legal requirement apparently.[1] [1] https://news.ycombinator.com/item?id=28077619 https://news.ycombinator.com/item?id=28077619
  - shuckles 5y ago
    > According to people briefed on the plans, every photo uploaded to iCloud in the US will be given a “safety voucher” saying whether it is suspect or not. Once a certain number of photos are marked as suspect, Apple will enable all the suspect photos to be decrypted and, if apparently illegal, passed on to the relevant authorities.