3 ms·

I think it's just sad that Apple will now likely be forced to switch to server-side scanning, which they've explained is strictly inferior to their client-side

I think it's just sad that Apple will now likely be forced to switch to server-side scanning, which they've explained is strictly inferior to their client-side proposal (and which I wrote about here: https://news.ycombinator.com/item?id=28176418 https://news.ycombinator.com/item?id=28176418). Irrational fears and (some) misinformation (which I won't accude HN of, for the purposes of this discussion, just reddit, Twitter, and the "tech NGOs") will result in worse outcomes for consumers. This backlash (including these NGOs) also protested the iMessage changes by equating "putting a nudity warning" with "breaking E2E encryption". I'm not a parent yet, but why prevent tech companies from adding this obvious (and desirable to many) feature? It'll be interesting if they walk back their fears of "non-CSAM hashes being added" when that problem is still present with cloud-scanning. They didn't protest Google, Microsoft, and others using PhotoDNA, which presents identical risks. Will they now still complain about Apple if they propose cloud-scanning? They'd be hypocritical not to, since their current arguments would still apply. But then why haven't they complained when everyone else did it?

stjohnswarts 5y ago
How is scanning on My Phone better than on server side? Either you trust apple with your data or you don't, supposedly only they have the keys to open the data on their servers in case it gets into 3rd party hands. I trust that far more than I trust Apple acting as a government spy on my own phone. Sure there are trade offs, but this one is well worth it. Your data isn't sitting unencrypted on apple servers. They have a key to open it but hackers who might steal that don't. I assure you it's as good as any encryption you would have applied to it.
- erikpukinskis 5y ago
  Because, with the proposed system in place, if law enforcement wants to decrypt your data they have to subpoena you, not Apple. As long as Apple can’t do this client-side scanning scheme, they have to keep the keys to your data on their servers, which means law enforcement can subpoena them without you even being aware of it.

stjohnswarts 5y ago

How is scanning on My Phone better than on server side? Either you trust apple with your data or you don't, supposedly only they have the keys to open the data on their servers in case it gets into 3rd party hands. I trust that far more than I trust Apple acting as a government spy on my own phone. Sure there are trade offs, but this one is well worth it. Your data isn't sitting unencrypted on apple servers. They have a key to open it but hackers who might steal that don't. I assure you it's as good as any encryption you would have applied to it.

erikpukinskis 5y ago
Because, with the proposed system in place, if law enforcement wants to decrypt your data they have to subpoena you, not Apple. As long as Apple can’t do this client-side scanning scheme, they have to keep the keys to your data on their servers, which means law enforcement can subpoena them without you even being aware of it.