3 ms·
You just need to get ahold of some widely spread CSAM. Certainly not everybody is ready to do that, but it is far from impossible for a motivated individual to
by read_if_gay_ 5y ago
You just need to get ahold of some widely spread CSAM. Certainly not everybody is ready to do that, but it is far from impossible for a motivated individual to obtain "hot" hashes.
- vageli 5y agoAnd once created, the list could be distributed ad infinitum. This is "security by obscurity" at its finest (in terms of the lack of availability of the hash database). If it were a truly robust system, why not make the hash database public?
- zepto 5y agoThis is false. There is a second independent hash that you don’t have access to that also needs to match.
- read_if_gay_ 5y agoEver hear about Kerckhoff’s principle?
- zimpenfish 5y ago> You just need to get ahold of some widely spread CSAM. Risky. But ok, you still need to get hold of 30 images[1] that are in the NCMEC corpus before it'll even get flagged up to a human reviewer. [1] Do we know if it's 30 distinct images or will 30 copies of the same one trigger things? The latter is far easier than the former for the gathering step here, of course.