4 ms·
Apple have stated that they will make the database of hashes that their system uses auditable by researchers. Does anyone know if that has happened yet? Is it p
by spuz 5y ago
Apple have stated that they will make the database of hashes that their system uses auditable by researchers. Does anyone know if that has happened yet? Is it possible to view the database and if so, in what form? Can the actual hashes be extracted? If so then that would obviously open up the kind of attack described in the article. Otherwise, it would be interesting to know how Apple expects the database to be auditable without revealing the hashes themselves.
- cucumb3rrelish 5y ago> Is it possible to view the database and if so, in what form? Not for the general public, it's also in encrypted form on the device I can tell you how they will make it auditable without revealing hashes to all of their users: by only showing them to experts, just like you don't publish the entire databreach credentials in cleartext but hand them to someone experienced who acts as a middleman for public transparency
- bnj 5y agoMy understanding is that Apple is going to publish a hash of the database, so a user would be able to compare the hash of the database on their device with the published hash to be “assured” that the same dataset is being used everywhere.