4 ms·
Not resembles. The adversarial image has to match a private perceptual hash function of the same CSAM image that the NeuralHash function matched before a human
by ec109685 5y ago
Not resembles. The adversarial image has to match a private perceptual hash function of the same CSAM image that the NeuralHash function matched before a human reviewer ever looks at it.
- onepunchedman 5y agoDo you have any material on this private function?
- ec109685 5y agoNot beyond the documents Apple has shared. Presumably it will be kept that way given it prevents an adversarial attack against it.