5 ms·

On the other hand, CSS might -- eventually, anyway -- offer the best compromise for facilitating reliable, responsible lawful access to mass consumer informatio

• akersten 5y ago
  > Develop CSS No, do not. There is no reasonable privacy preserving manner in which you can do so. Spyware is fundamentally incompatible with privacy. I don't care how many god damn whitepapers they write about their novel perceptual hash cohort-based homomorphic 0-trust TPM scanner. It's still a rat.
  • 2stop 5y ago
    What about in the Apple case where: - The alternative is hold the keys to your photo library and scan the entire thing (like google photos) vs - Don't hold the keys but do CSS, that then on a positive provides partial keys to partial data. That feels like a better trade off. But I can see that it could be the slippery slope towards broader CSS...
  • jdlshore 5y ago
    As another poster said, it's not a choice of whether or not your content is scanned; it's a choice of where. If you upload pictures to the cloud—which is the only scenario in which Apple's scanning was stated to happen¹—then it's a choice between scanning on your device, which allows for the possibility of E2E encryption, or definitely no encryption and scanning on the server. At present, Apple doesn't scan photos on the server, but all their competitors do, and I don't doubt for a second that they will eventually start scanning photos as well. The choice is not if, but how, and their client-side solution seems to me to be much more privacy-preserving than server-side scanning. ¹If you don't believe them, that's fine, but given that they have root control over the software running on your phone, your only choice is to either believe them or don't use their phones. Same goes for all other phones.
    • 0x0 5y ago
      There are other options. For example, a full e2e encryption system where only the user owns the keys and nothing is scanned. This is already possible today with any general purpose computer.
      • jdlshore 5y ago
        See my peer reply to mdekkers.
      • tshaddox 5y ago
        Indeed, and you’re welcome to disable iCloud and use any of those systems, right?
    • mdekkers 5y ago
      > it's a choice between scanning on your device, which allows for the possibility of E2E encryption No, it isn’t a choice at all. Your statement is factually incorrect, and presents a false situation. Apple has no obligation, legal or otherwise, to perform CSS. Nothing is stopping Apple from allowing E2EE right now.
      • jdlshore 5y ago
        I’m presuming that Apple wants to scan for CSAM, which I think they do. Personally, I’m also in favor of tightly-regulated scanning for CSAM. The fact that they don’t support E2EE, despite their strong pro-privacy stance, supports my presumption. So it comes back to the same argument: presuming Apple is going to scan cloud images for CSAM (which, again, all other major provides already do, to my knowledge), then it’s just a question of how. For someone like me, who believes scanning for CSAM is worthwhile, Apple’s solution is far superior and privacy-preserving compared to, say, Microsoft’s. I think this argument really comes down to “no scanning at all” vs. “carefully applied scanning,” but that’s not how it’s framed by the people objecting. I think it’s because that’s an argument they’re not likely to win. And so, if they “win,” I think we’ll just end up with cheap and dumb server-side scanning, which would take a whole lot less effort and political trouble for Apple… and ironically, be much easier to subvert in the ways people against CSS worry about.
• AbrahamParangi 5y ago
  Looking forward to the day that people publicly argue for client-side scanning on NeuralinkOS for thought-crime.
  • mdp2021 5y ago
    You can already refer, at this stage, to pattern recognition for criminal tendency from physiognomy, "Active Phrenology 2.0".