3 ms·
On the subject of compromised devices: > And the idea that the most valuable thing that an attacker — who’s undergone such an extremely difficult action as bre
by avnigo 5y ago
On the subject of compromised devices:
> And the idea that the most valuable thing that an attacker — who’s undergone such an extremely difficult action as breaching someone’s device — was that they would want to trigger a manual review of an account doesn’t make much sense. [...] and that is something that we want to only occur in cases where it’s a legitimate high value report. We’ve designed the system in that way, but if we consider the attack scenario you brought up, I think that’s not a very compelling outcome to an attacker.
It seems that Apple considers that scenario unlikely, although I think it would make a lot of sense for an attacker to choose that avenue, since they get Apple to do the reporting for them.
However, Apple also claims that even if such scenario would happen, their threshold limits and manual review would make such attacks worthless, but they do not elaborate as to how those checks would actually filter out those attacks.
- hypothesis 5y agoFor some reason he thinks that getting access to user data, exfiltrating it and covering tracks by planting some CP is not valuable…
- loriverkutya 5y agoThey not going to go through Apple if they planted CP on your device, they going to take you to custody saying they got an anonymous tip or something along this line or just tip off the police to do the job for them because it worked in the past, requires less effort and maybe I'm wrong on this but there is no additional gain from going though all the hops when you can do it with an anonymous call.
- hypothesis 5y agoI agree that “$5 wrench”-like solutions are more practical for most cases. However, one would expect that an anonymous tip trick is common enough to make someone skeptical at some point. With this new system it will look like “you” self-reported yourself, no one else to question, plus Apple build a reporting pipeline with express expectation of “high-quality” actionable reports. So it will drag on for much longer simply because “computer said so” and no real way to disprove any of that.
- alwillis 5y agoThey not going to go through Apple if they planted CP on your device… That’s not how it works. If a device has CSAM on it and it reaches a particular threshold, Apple gets notified and reviews it before any other entity gets involved, like NCMEC or law enforcement. It's also extremely difficult for someone to break into an iPhone and plant CSAM on it without the user knowing. Yes, a determined state-sponsored attacker could possibly do it but that means you got an entirely different set of problems anyway. The point is that it's highly unlikely that a disgruntled employee or mentally disturbed roommate could pull this off, which is what 99.999% of us have to worry about.
- Bilal_io 5y agoHe's saying it's unlikely, just to avoid detailing what Apple will do in case it happens, and it will happen. Many people will fall victim to scumbag hackers that will do it just for fun.
- deleted 5y ago[deleted]