4 ms·
Disappointing. While moderating CP distribution and storage is obviously the right thing to do, I do not think this approach will be a worthwhile endeavor for
by game_the0ry 5y ago
Disappointing.
While moderating CP distribution and storage is obviously the right thing to do, I do not think this approach will be a worthwhile endeavor for apple and governments.
Let me explain: imagine you are bad guy with bad stuff on your iphone, and you hear apple will be scanning your phone. What is the next logical thing you would do? Migrate your stuff to something else, obviously. Encrypting a usb stick does not require a high degree of technical skill [1]; neither does running tor browser.
So I am thinking 3 things:
1. This is not about CP or doing the right thing, but rather apple bowing to government/s pressure to create a half-ass backdoor to monitor and squash dissidents.
2. Apple and government/s are incompetent and do not realize that criminals are always one step ahead.
3. Most likely, some combination of the above - government/s have demonstrated they are willing to go hard on dissidents on the personal electronics front [2], not realizing that they will only mitigate, not exterminate, the dissent they fear so much.
For the average joe, I would say this - your privacy is effectively gone when you use an electronic device that comes with closed-source code pre-installed.
For the benevolent dissidents - there are many tools at your disposal [3, 4].
Likely next iteration - governments / courts / cops compel suspects to hand over passwords and encryption keys over to prosecutors. It looks like it already started [5, 6], so act accordingly.
[1] https://www.veracrypt.fr/code/VeraCrypt/ https://www.veracrypt.fr/code/VeraCrypt/
[2] https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-pegasus-cellphones/ https://www.washingtonpost.com/investigations/interactive/20...
[3] https://files.gendo.ch/Books/InfoSec_for_Journalists_V1.1.pdf https://files.gendo.ch/Books/InfoSec_for_Journalists_V1.1.pd...
[4] https://www.privacytools.io/ https://www.privacytools.io/
[5] https://www.bbc.com/news/uk-england-11479831 https://www.bbc.com/news/uk-england-11479831
[6] https://en.wikipedia.org/wiki/Key_disclosure_law https://en.wikipedia.org/wiki/Key_disclosure_law
- dannyw 5y agoIt is not the role of infrastructure providers to reach into private, on device content. That is like the USPS opening every letter and scanning what is inside. Even if it's done with machine learning, that is absolutely not okay, no matter what it is for.
- game_the0ry 5y agoAgreed, but not like we have a choice with that matter.
- voakbasda 5y agoYou have a choice about whether to keep or discard your iPhone.
- rcruzeiro 5y agoThough we were okay with Gmail doing the same because "hey, it's free!". But I understand your concern here. All our lives are now digitalised and maybe stored forever somewhere and anything you do, even if completely benign, could be considered a crime in some country or even in your own country in a few years from now.
- marcosdumay 5y agoYour gmail messages live on Google's servers. It's not ok for them to scan everything, but it's completely different from Apple scanning your phone's content.
- pgoggijr 5y agoThe hashes are computed from images that live in iCloud - how is this different?
- rcruzeiro 5y agoSuppose Apple flags some image in iCloud using a hash that was probably sent from the device. Do they currently have the capability to decrypt the image to check if the content is actually illegal before reporting it to the authorities without needing access to the physical device? (Not trying to make a counter-argument to your comment. I genuinely don't get this part).
- 5y ago