3 ms·
They announced CSAM scanning but would you trust there is no scanning if they said they reversed their decision and eventually gave you E2E? Considering how big
by neop1x 5y ago
They announced CSAM scanning but would you trust there is no scanning if they said they reversed their decision and eventually gave you E2E? Considering how big the firmware size is and that all images are processed by their APIs and they control both SW and HW they could hide such scanning in the firmware or even hardware if they wanted or were forced to. They could add a new separate microcontroller similar to Secure Enclave which would (in addition to "AI-enhancing" the picture) compute and compare CSAM hash. On a positive match, the main CPU would decrypt and run a hidden reporting code which would report the image over TLS-secured channel with Secure Enclave-backed certificate pinning to prevent any MITM. No one would notice because it would be decrypted only after a positive match and no one could see the image being sent out on a positive match because of TLS. It is not just Apple, though. We currently don't have enough control over our devices, especially smart phones. There are some vendor binary blobs on Android too. Now or in the future, these proprietary, very capable devices are ideal for many types of spying. Stallman warned about this many years ago.