3 ms·
Why not combine this with a second different hash? E: Better yet, only run the second hash if you have a collision, which should be very rare.
by floor_ 5y ago
Why not combine this with a second different hash?
E: Better yet, only run the second hash if you have a collision, which should be very rare.
- theshrike79 5y agoHow do you know they aren't doing this on the backend after the initial on-device match?
- yeldarb 5y agoApple does, and I created a proof of concept for how it might work to guard against adversarially perturbed images here: https://blog.roboflow.com/apples-csam-neuralhash-collision/ https://blog.roboflow.com/apples-csam-neuralhash-collision/