44 ms·
They will be if you collide a low-res image that resembles CSAM. Why would person doing manual review risk his job in case if he’s unsure? Naturally he will ju
by hypothesis 5y ago
They will be if you collide a low-res image that resembles CSAM.
Why would person doing manual review risk his job in case if he’s unsure? Naturally he will just play it safe and report images.
- ec109685 5y agoNot resembles. The adversarial image has to match a private perceptual hash function of the same CSAM image that the NeuralHash function matched before a human reviewer ever looks at it.
- onepunchedman 5y agoDo you have any material on this private function?
- ec109685 5y agoNot beyond the documents Apple has shared. Presumably it will be kept that way given it prevents an adversarial attack against it.