3 ms·
This can also be used to make Apple's system useless, no? If enough (millions?) of people were to, say, go to a web site and save generated gray-blobs to their
by HumblyTossed 5y ago
This can also be used to make Apple's system useless, no? If enough (millions?) of people were to, say, go to a web site and save generated gray-blobs to their phones, it would create enough false-positives to kill this system, right? Maybe game it and have everyone convert their various profile pics to these images.
- floatingatoll 5y agoNo, because Apple will simply start killing Apple IDs and blocking hardware by serial number for abusive behavior towards Apple when y’all do that, and that’s a very expensive problem to overcome. “You tried to exploit our production systems and we’re ending our customer relationship with you over it” is a classic Apple move and no one outside of the Hackintosh community realizes that their devices include crypto-signed attestations of their serial number during Apple service sign-ins.
- robertoandred 5y agoAnd how would anyone know that those gray blobs match child porn?
- jug 5y agoExactly, that’s the scary abuse scenario where people could send a whole load of this stuff to e.g a political enemy.
- robertoandred 5y agoWhat? Why do you think gray blobs would hurt anyone?
- dannyw 5y agoNo one is going to send gray blobs, they will be finding legal porn (like pussy close ups, tongue pics, whatever) and then disturbing it to trigger a CSAM hit. The low res derivative will match, perhaps even closely, because pussy closeups look similar to an apple employee when its grayscale 64 by 64 pixels (remember: it's illegal for Apple to transmit CSAM, so it must be so visually degraded to the point where it's arguably not visual). The victim will get raided, be considered a paedophile by their workplace, media, and family, and perhaps even go into jail. The attacker in this case can be users of Pegasus unhappy with a journalist.
- robertoandred 5y agoAnd disturbing it enough to match CSAM would make it obvious it’s been tampered with. And how would the attacker obtain the CSAM hashes they’d need to match?