4 ms·

Is the hash matching being done on device or off device? Up thread it was said that the device will hash the picture then send hash off for matching. If that

Is the hash matching being done on device or off device? Up thread it was said that the device will hash the picture then send hash off for matching. If that is a case, then the hashes coming off your device can be intercepted and checked vs other databases.

simondotau 5y ago
Hashing is done on device, matching is also done on device. In the event of a match, a "safety voucher" is generated and uploaded to iCloud. Multiple safety vouchers are required for your account to be flagged, at which point the contents of these vouchers (which contains metadata and a grayscale thumbnail of the photo) can be viewed by Apple.
- unityByFreedom 5y ago
  > Multiple safety vouchers are required for your account to be flagged I don't see how that makes any difference. What if someone plants bad data on your device? That would of course be a concern for cloud-scanning too. I don't care how secure Apple says their devices are. There are companies that can crack them, and you can bet some unscrupulous people will use that against their opponents. Politicians and other influential people should be as concerned about this as everyone else. Didn't Saudis crack Bezos' phone to reveal his affair? With this tech they could make up worse stories. I believe our justice department could tell the difference between a hack and someone who actually harbors bad data most of the time, but I don't like relying on that.
  - simondotau 5y ago
    > What if Given that a functionally identical system has been implemented by Google for years, we should already know what will happen. So let me ask. Is this already happening to people with Android devices? In terms of opportunities for framing someone, how is what Google does any different?
    - unityByFreedom 5y ago
      Google's system doesn't do on-device scanning, and I gave an example above of something like this happening. Security is a constant race between good and bad actors. If you weaken your system you're scoring for the other team.

simondotau 5y ago

Hashing is done on device, matching is also done on device. In the event of a match, a "safety voucher" is generated and uploaded to iCloud. Multiple safety vouchers are required for your account to be flagged, at which point the contents of these vouchers (which contains metadata and a grayscale thumbnail of the photo) can be viewed by Apple.

unityByFreedom 5y ago
> Multiple safety vouchers are required for your account to be flagged I don't see how that makes any difference. What if someone plants bad data on your device? That would of course be a concern for cloud-scanning too. I don't care how secure Apple says their devices are. There are companies that can crack them, and you can bet some unscrupulous people will use that against their opponents. Politicians and other influential people should be as concerned about this as everyone else. Didn't Saudis crack Bezos' phone to reveal his affair? With this tech they could make up worse stories. I believe our justice department could tell the difference between a hack and someone who actually harbors bad data most of the time, but I don't like relying on that.
- simondotau 5y ago
  > What if Given that a functionally identical system has been implemented by Google for years, we should already know what will happen. So let me ask. Is this already happening to people with Android devices? In terms of opportunities for framing someone, how is what Google does any different?
  - unityByFreedom 5y ago
    Google's system doesn't do on-device scanning, and I gave an example above of something like this happening. Security is a constant race between good and bad actors. If you weaken your system you're scoring for the other team.