3 ms·

Take a look at this collision https://twitter.com/SarahJamieLewis/status/1428083744280256512 https://twitter.com/SarahJamieLewis/status/14280837442802565...

legostormtroopr 5y ago
Those are two almost identical images based off each other. I know that that "think of the children" is a meme, but I think this illustrates the point for apple. If you have a croped or modified image of CSA the system will identify it. As long as your image is different enough from CSA, you are safe. The point here is that Apple is specifically looking for matches against known CSA material. If someone can demonstrate that a legal NSFW image (eg. regular old-fashioned pornography), can be collided with a legal, completely 100% SFW image then I'll be concerned. But until then, this looks like a reasonable and supportable way for finding CSAM in real time.
- hartator 5y ago
  > If someone can demonstrate that a legal NSFW image (eg. regular old-fashioned pornography), can be collided with a legal, completely 100% SFW image then I'll be concerned. Look at this other collision: https://twitter.com/SarahJamieLewis/status/1428206088118149123 https://twitter.com/SarahJamieLewis/status/14282060881181491... An attacker can send you an innocent looking picture that embbed some CSA material and you get swatted the next day.
  - legostormtroopr 5y ago
    I think you are getting downvoted because thats the same image I replied to. Looking at those two images its plain to see why they are identical. And if someone is sending you CSA material, isn't that the point of this process. Apple identifies it as CSA, can give you a warning its sensitive, and identify they authorities that people are sending CSA. Again - this seems like a win. If Apple can automatically identify CSA material, en-masse thats good. edit: It looks like they are different URLs, but Twitter only allows people to see replies if they are logged in, so I can't see that example. edit 2: On further thought, if someone can use CSA material and produce an innocuous image with a similar hash, if they send that image to you, its still proof that the sender had CSA material. Again, its still good.

legostormtroopr 5y ago

Those are two almost identical images based off each other. I know that that "think of the children" is a meme, but I think this illustrates the point for apple. If you have a croped or modified image of CSA the system will identify it. As long as your image is different enough from CSA, you are safe. The point here is that Apple is specifically looking for matches against known CSA material. If someone can demonstrate that a legal NSFW image (eg. regular old-fashioned pornography), can be collided with a legal, completely 100% SFW image then I'll be concerned. But until then, this looks like a reasonable and supportable way for finding CSAM in real time.

hartator 5y ago
> If someone can demonstrate that a legal NSFW image (eg. regular old-fashioned pornography), can be collided with a legal, completely 100% SFW image then I'll be concerned. Look at this other collision: https://twitter.com/SarahJamieLewis/status/1428206088118149123 https://twitter.com/SarahJamieLewis/status/14282060881181491... An attacker can send you an innocent looking picture that embbed some CSA material and you get swatted the next day.
- legostormtroopr 5y ago
  I think you are getting downvoted because thats the same image I replied to. Looking at those two images its plain to see why they are identical. And if someone is sending you CSA material, isn't that the point of this process. Apple identifies it as CSA, can give you a warning its sensitive, and identify they authorities that people are sending CSA. Again - this seems like a win. If Apple can automatically identify CSA material, en-masse thats good. edit: It looks like they are different URLs, but Twitter only allows people to see replies if they are logged in, so I can't see that example. edit 2: On further thought, if someone can use CSA material and produce an innocuous image with a similar hash, if they send that image to you, its still proof that the sender had CSA material. Again, its still good.