3 ms·
But surely if they're doing this in anticipation of E2EE user data, that procedure becomes moot? So either they have no intention to actually protect user data
by vermilingua 5y ago
But surely if they're doing this in anticipation of E2EE user data, that procedure becomes moot?
So either they have no intention to actually protect user data, or the system is trivially broken; either way a pretty damning look for Apple.
- comex 5y agoNo, because the second hash is only performed after the first hash has already matched, and so, using the threshold secret sharing crypto, the server has learned the escrowed encryption key for the image. (Well, for its “visual derivative”, at any rate.)
- vermilingua 5y agoSo, Apple retains the ability to decrypt E2EE data? That’s… worse?
- ec109685 5y agoOnly E2EE data that matches known CSAM hashes, and only when 30 matches have been found, and only the “visual derivative” of those images.