3 ms·
> 7. Apple reviewer.... This part IMO makes Apple itself the most likely "target", but for a different kind of attack. Just wait until someone who wasn't supp
by st_goliath 5y ago
> 7. Apple reviewer....
This part IMO makes Apple itself the most likely "target", but for a different kind of attack.
Just wait until someone who wasn't supposed to, somewhere, somehow gets their hands on some of the actual hashes (IMO bound to happen eventually). Also remember that with Apple, we now have an oracle that can tell us. And with all the media attention around the issue, this might further incentivize people to try.
From that I can picture a chain of events something like this:
1. Somebody writes a script that generates pre-image collisions like in the post, but for actual hashes Apple uses.
2. The script ends up on the Internet. News reporting picks it up and it spreads around a little. This also means trolls get their hands on it.
3. Tons of colliding image are created by people all over the planet and sent around to even more people. Not for targeted attacks, but simply for the lulz.
4. Newer scripts show up eventually, e.g. for perturbing existing images or similar stunts. More news reporting follows, accelerating the effect and possibly also spreading perturbed images around themselves. Perturbed images (cat pictures, animated gifs, etc...) get uploaded to places like 9gag, reaching large audiences.
5. Repeat steps 1-4 until the Internet and the news grow bored with it.
During that entire process, potentially each of those images that ends up on an iDevice will have to be manually reviewed...
- Grustaf 5y agoDo you think Apple might perhaps halt the system if the script get wide publication?
- dylan604 5y agoI've only seen Apple admit defeat once, and that was regarding the trashcan MacPro. Otherwise, it's "you're holding it wrong" type of victim blaming as they quietly revise the issue on the next version. Can anyone else think of times where Apple has admitted to something bad on their end and then reversed/walked away from whatever it was?
- Grustaf 5y agoDo you really care what they "admit"? I thought you were worried about innocent people being framed. Obviously if a way to frame people gets widespread, Apple will stop it. They don't want that publicity.
- dylan604 5y agoYou clearly have me confused with someone else, as I never mentioned anything about innocent people being framed. With Apple, nothing is "obvious".
- Grustaf 5y agoThe comment above that I responded to seemed to talk about that. But in any case, I for one don't care what Apple admits. But I am certain they will not want all the bad publicity that would come if the system was widely abused, if you worry about that. That much is actually "obvious", they are not stupid.
- jtmarl1n 5y agoThe Apple AirPower mat comes to mind although there are rumors they haven't abandoned the effort completely. Butterfly keyboard seems to finally be acknowledged as a bad idea and took several years to get there. The next Macbook refresh will be interesting as there are rumors they are bring back several I/O ports that were removed when switching to all USB-C. I agree with your overall point, just some things that came to mind when reading your question.
- dylan604 5y agoah yes, the butterfly keyboard. i must have blocked that from my mind after the horror it was. although, they didn't admit anything on that one. that was just another "you're holding it wrong" silent revision that was then touted as a new feature (rather than oops we fucked up). The trashcan MacPro is still the only mea culpa I am aware of them actually owning the mistake. The Airpower whatever was never really released as a product though, so it is a strange category. New question, is the Airpower whatever the only product offically announced on the big stage to never be released?