7 ms·

This feature runs only on the files that are uploaded to iCloud using iCloud Photos.

oozeofwisdom 5y ago
*For now
xkcd-sucks 5y ago
Right now, Apple says they chose to configure it such that the feature runs only on the files that are uploaded to iCloud using iCloud Photos, and end users have no way to confirm whether this claim is actually true.
- cassianoleal 5y ago
  It's also a single bug away from not being true. Oh wait, Apple software don't have bugs though, right? /s
  - zepto 5y ago
    What kind of single bug? How can a photo upload process suddenly impact random files on the filesystem?
    - zekrioca 5y ago
      https://www.cvedetails.com/cve/CVE-2007-5037/ https://www.cvedetails.com/cve/CVE-2007-5037/
      - zepto 5y ago
        That CVE is not a link to anything relevant to the question. Were you aware of that when you posted it?
    - shuckles 5y ago
      People who sincerely believe this is accidentally possible should be constantly freaked out that iCloud Backups is “accidentally” uploading all their photos to a warrant accessible database.
    - cassianoleal 5y ago
      > Apple says they chose to configure it such that the feature runs only on the files that are uploaded to iCloud using iCloud Photos This must be implemented in software. A bug in this software that causes the "only on files that are uploaded" return the wrong boolean value means it will scan local photos. I never said random files on the filesystem. That's your strawman. In any case, it could well happen as well. Something is deciding what to scan, and that's software.
- notJim 5y ago
  It's part of the process that uploads the photos to iCloud. If you think through the likely implementation of such a thing, it would be more than a simple config change to change this. > end users have no way to confirm whether this claim is actually true This is true of all proprietary software.
threatofrain 5y ago
Which I find really puzzling because if you announce this fact to people who will basically have their lives ended if they get caught with CSAM material... then they will be the ones to avoid it. While the rest of the population is being scanned.
- notJim 5y ago
  The point is to prevent people from using iCloud to distribute CSAM.
neolog 5y ago
Without the implementation, they can respond to government demands with "we don't have the capability to report dissidents." Once they have the capability rolled out, it's just a one-line config change to enable it.
zekrioca 5y ago
It will most likely scan files in the /iCloud directory inside iPhone/iPad. In there, the file scan process described above will be executed, regardless of what the user stores there. I do not see how this wouldn’t be easily extended to all mountpoints on the device. And again, one needs to have faith and assume the /iCloud binary information on storage is really physically isolated from everything else. Sorry, it is very unlikely they aren’t really scanning, as I said, everything. Edit: clarity.
- zepto 5y ago
  This is just plain bullshit. The process is well documented, and there is no general scan of files inside iCloud. In fact there is no filesystem scan at all. There is only a check that takes place during the upload process to iCloud Photo Library, which is separate from iCloud Drive.
  - zekrioca 5y ago
    Assume /iCloud == /iCloud/Photo Library then.
    - zepto 5y ago
      That makes no sense - iCloud Photo Library is a separate service from iCloud Drive. It isn’t part of the filesystem. In any case the claim that the system will scan files other than photos chosen for upload is just a lie.
  - vineyardmike 5y ago
    > The process is well documented The only well documented process in tech is source-available. There is documents and speculation regarding this process but we don't actually know the details beyond what they claim and they're not saying too much.
    - zepto 5y ago
      The information about what is checked by this mechanism is well documented. If you want to say that Apple could be lying or mistaken about what the code does, that is a different claim from whether they have documented what I said they documented.

*For now

Right now, Apple says they chose to configure it such that the feature runs only on the files that are uploaded to iCloud using iCloud Photos, and end users have no way to confirm whether this claim is actually true.

cassianoleal 5y ago
It's also a single bug away from not being true. Oh wait, Apple software don't have bugs though, right? /s
- zepto 5y ago
  What kind of single bug? How can a photo upload process suddenly impact random files on the filesystem?
  - zekrioca 5y ago
    https://www.cvedetails.com/cve/CVE-2007-5037/ https://www.cvedetails.com/cve/CVE-2007-5037/
    - zepto 5y ago
      That CVE is not a link to anything relevant to the question. Were you aware of that when you posted it?
  - shuckles 5y ago
    People who sincerely believe this is accidentally possible should be constantly freaked out that iCloud Backups is “accidentally” uploading all their photos to a warrant accessible database.
  - cassianoleal 5y ago
    > Apple says they chose to configure it such that the feature runs only on the files that are uploaded to iCloud using iCloud Photos This must be implemented in software. A bug in this software that causes the "only on files that are uploaded" return the wrong boolean value means it will scan local photos. I never said random files on the filesystem. That's your strawman. In any case, it could well happen as well. Something is deciding what to scan, and that's software.
notJim 5y ago
It's part of the process that uploads the photos to iCloud. If you think through the likely implementation of such a thing, it would be more than a simple config change to change this. > end users have no way to confirm whether this claim is actually true This is true of all proprietary software.

threatofrain 5y ago

Which I find really puzzling because if you announce this fact to people who will basically have their lives ended if they get caught with CSAM material... then they will be the ones to avoid it. While the rest of the population is being scanned.

notJim 5y ago
The point is to prevent people from using iCloud to distribute CSAM.

neolog 5y ago

Without the implementation, they can respond to government demands with "we don't have the capability to report dissidents." Once they have the capability rolled out, it's just a one-line config change to enable it.

zekrioca 5y ago

It will most likely scan files in the /iCloud directory inside iPhone/iPad. In there, the file scan process described above will be executed, regardless of what the user stores there. I do not see how this wouldn’t be easily extended to all mountpoints on the device. And again, one needs to have faith and assume the /iCloud binary information on storage is really physically isolated from everything else. Sorry, it is very unlikely they aren’t really scanning, as I said, everything. Edit: clarity.

zepto 5y ago
This is just plain bullshit. The process is well documented, and there is no general scan of files inside iCloud. In fact there is no filesystem scan at all. There is only a check that takes place during the upload process to iCloud Photo Library, which is separate from iCloud Drive.
- zekrioca 5y ago
  Assume /iCloud == /iCloud/Photo Library then.
  - zepto 5y ago
    That makes no sense - iCloud Photo Library is a separate service from iCloud Drive. It isn’t part of the filesystem. In any case the claim that the system will scan files other than photos chosen for upload is just a lie.
- vineyardmike 5y ago
  > The process is well documented The only well documented process in tech is source-available. There is documents and speculation regarding this process but we don't actually know the details beyond what they claim and they're not saying too much.
  - zepto 5y ago
    The information about what is checked by this mechanism is well documented. If you want to say that Apple could be lying or mistaken about what the code does, that is a different claim from whether they have documented what I said they documented.