3 ms·

People sharing images that an authoritarian government considers banned might still be exposed by such a scheme, given they are likely to be exactly the same da

by rekoil 4y ago

People sharing images that an authoritarian government considers banned might still be exposed by such a scheme, given they are likely to be exactly the same data. There are, after all, no new photos of tank man being photographed, any that are shared would be identical to someone elses, unless every recipient opened them up and modified them, and even then I'm not sure that actually modifies the data if done on an iOS device, as modifications done to images can be undone suggesting to me they are only a layer on top of the unchanged image, which would still return the same hash. Unfortunately, I think the privacy problems surrounding iCloud Photos remain to an extent.

noduerme 4y ago
According to the Wired article linked by parent, there is no longer any hashing or client-side scanning scheme at all, except one that can be enabled locally by parents and doesn't report anything to Apple.
- rekoil 4y ago
  But in the documentation[1] under the heading "Encryption of certain metadata and usage information" they state: > Some metadata and usage information stored in iCloud remains under standard data protection, even when Advanced Data Protection is enabled. For example, dates and times when a file or object was modified are used to sort your information, and checksums of file and photo data are used to help Apple de-duplicate and optimize your iCloud and device storage This checksum is described as: > The raw byte checksum of the photo or video This hash can technically be shared by Apple, since they own the key used to encrypt it. And depending on when the hash is computed (post-encryption it's no problem, pre-encryption we have a problem), this could technically be used to find people sharing known undesired images e.g. Tank Man or CSAM. [1]: https://support.apple.com/en-us/HT202303#advanced https://support.apple.com/en-us/HT202303#advanced
barsonme 4y ago
Given that modifying just a single bit in an image results in a wildly different hash digest, I think the risk is a little overblown. There are probably easier ways for authoritarian governments to figure out who's sending illegal content, like just taking somebody's device and looking at their messages.
- rekoil 4y ago
  It's a little hard to take any percentage of 1.4B peoples phones, get them to comply unlocking their devices, and then inspecting those. It's a lot easier to tell vendor X that "in country Y list Z is the one that should be used when looking for CSAM", and then add some known Tank Man derivative hashes to that list and find out directly who to arrest.

by rekoil 4y ago

noduerme 4y ago

According to the Wired article linked by parent, there is no longer any hashing or client-side scanning scheme at all, except one that can be enabled locally by parents and doesn't report anything to Apple.

rekoil 4y ago
But in the documentation[1] under the heading "Encryption of certain metadata and usage information" they state: > Some metadata and usage information stored in iCloud remains under standard data protection, even when Advanced Data Protection is enabled. For example, dates and times when a file or object was modified are used to sort your information, and checksums of file and photo data are used to help Apple de-duplicate and optimize your iCloud and device storage This checksum is described as: > The raw byte checksum of the photo or video This hash can technically be shared by Apple, since they own the key used to encrypt it. And depending on when the hash is computed (post-encryption it's no problem, pre-encryption we have a problem), this could technically be used to find people sharing known undesired images e.g. Tank Man or CSAM. [1]: https://support.apple.com/en-us/HT202303#advanced https://support.apple.com/en-us/HT202303#advanced

barsonme 4y ago

Given that modifying just a single bit in an image results in a wildly different hash digest, I think the risk is a little overblown. There are probably easier ways for authoritarian governments to figure out who's sending illegal content, like just taking somebody's device and looking at their messages.

rekoil 4y ago
It's a little hard to take any percentage of 1.4B peoples phones, get them to comply unlocking their devices, and then inspecting those. It's a lot easier to tell vendor X that "in country Y list Z is the one that should be used when looking for CSAM", and then add some known Tank Man derivative hashes to that list and find out directly who to arrest.