3 ms·
> sounds like they're moving the scanning from server to client side That is good, but unless a system like this is fully open source and runs only signed code
by SquishyPanda23 5y ago
> sounds like they're moving the scanning from server to client side
That is good, but unless a system like this is fully open source and runs only signed code there really aren't many protections against abuse.
- vineyardmike 5y agoAnd who audits the DB hashes? The code is the easiest part to trust.
- eertami 5y agoYou don't even need to sneak illegitimate hashes. Just use the next Pegasus-esque zero-day to dump a photo from the hash list on to the phone.
- vineyardmike 5y agoYeah, but adding whatever document/meme/etc that will represent the group you hate and boom you have a way to identify operatives of a politician party. eg. Anyone with a "Feel the Bern" marketing material -> arrest them under suspicion of CSAM. Search their device and find them as dissidents.