3 ms·
The specific approach isn't in law. But the requirement to scan photos stored in the cloud is. On this specific point I think reasonable to believe that Apple
by avianlyric 5y ago
The specific approach isn't in law. But the requirement to scan photos stored in the cloud is.
On this specific point I think reasonable to believe that Apple want to E2E iCloud photos, and their stated approach to CSAM is how they'll achieve E2E iCloud photos, while remaining compliant with the requirement to scan for CSAM they might be hosting.
Now there's a very strong argument to be made that Apple have made an appalling trade-off here, prioritising E2E over not doing on device scanning. But it's a trade-off that's only happened due to the requirement for CSAM scanning.
An interesting approach Apple could take, is apply E2E iCloud photos in Europe, and continue with on server scanning (and no E2E) for the US.
- brendoelfrendo 5y ago> On this specific point I think reasonable to believe that Apple want to E2E iCloud photos Here's the thing: if they wanted this they should have said so, because until then I'm not going to make this assumption. I can only make decisions on information I have, not on wishful thinking.
- ipv6ipv4 5y ago> But the requirement to scan photos stored in the cloud is. This is categorically false. The law is very clear. Known CSAM must be reported. There is no obligation to search for it. The law explicitly exempts service providers from having to search for anything in a paragraph aptly named “protection of privacy”. The text of the law: https://www.law.cornell.edu/uscode/text/18/2258A https://www.law.cornell.edu/uscode/text/18/2258A