4 ms·

They not going to go through Apple if they planted CP on your device, they going to take you to custody saying they got an anonymous tip or something along this

They not going to go through Apple if they planted CP on your device, they going to take you to custody saying they got an anonymous tip or something along this line or just tip off the police to do the job for them because it worked in the past, requires less effort and maybe I'm wrong on this but there is no additional gain from going though all the hops when you can do it with an anonymous call. Also, if you have full access to somebody's phone, it does not matter if Apple is scanning for CP or not, you can do much more sophisticated things. Also 0-day non click exploits are not something random scriptkiddies running around with dropping CP on random phones as they are way too valuable.

Arrath 5y ago
Certainly, twitch pranksters and 4chan trolls have shown its practically frictionless to SWAT someone and get the cops to raid their house, much easier than any convoluted hacking exercise engineered by a hollywood script writer. > there is no additional gain from going though all the hops The only thing I could see would be getting the victim locked out of their iCloud etc accounts with little/no immediate recourse, as from what I have read the process seems to be to lock their accounts as the CP detection alert is sent to law enforcement. > Also 0-day non click exploits are not something random scriptkiddies running around with dropping CP on random phones as they are way too valuable. I agree, 0-days are the far high end and wouldn't be used for things like this especially by trolls, but I have to imagine there are methods in the lower-hanging fruit levels available to malcontents to sneak content like this onto unsuspecting users devices. Like, custom ringtone/emoji apps and download packs, random QR codes that lead to downloading a place's menu but also a suspect image, or other usual suspects.

Arrath 5y ago

Certainly, twitch pranksters and 4chan trolls have shown its practically frictionless to SWAT someone and get the cops to raid their house, much easier than any convoluted hacking exercise engineered by a hollywood script writer. > there is no additional gain from going though all the hops The only thing I could see would be getting the victim locked out of their iCloud etc accounts with little/no immediate recourse, as from what I have read the process seems to be to lock their accounts as the CP detection alert is sent to law enforcement. > Also 0-day non click exploits are not something random scriptkiddies running around with dropping CP on random phones as they are way too valuable. I agree, 0-days are the far high end and wouldn't be used for things like this especially by trolls, but I have to imagine there are methods in the lower-hanging fruit levels available to malcontents to sneak content like this onto unsuspecting users devices. Like, custom ringtone/emoji apps and download packs, random QR codes that lead to downloading a place's menu but also a suspect image, or other usual suspects.