5 ms·
> Essentially exactly why Apple didn't add CSAM scanning to the iPhone. They don't need to. iCloud uploads plaintext content hashes of all files even when e2e
by sneak 3y ago
> Essentially exactly why Apple didn't add CSAM scanning to the iPhone.
They don't need to. iCloud uploads plaintext content hashes of all files even when e2ee is turned on. They know all of the users that have certain files, even if each and every one of those users is using the opt-in e2ee of iCloud.
Normal iCloud allows Apple to scan everything serverside, natch. This is 99%+ of all iCloud users today.
- est31 3y ago> iCloud uploads plaintext content hashes of all files even when e2ee is turned on. Do you have a source for that claim? This is interesting.
- rglullis 3y agoFYI: sneak is a security researcher himself.
- selsta 3y agoApple has a list of all metadata that uses regular encryption instead of E2EE: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303
- est31 3y agoI confirm there is entries mentioning "raw byte checksums". Thanks!
- nicce 3y ago> They don't need to. iCloud uploads plaintext content hashes of all files even when e2ee is turned on. However, regular hashes (SHA256 et al.) are too strict, and these hashes are mostly useless for this use case. The don't take variance in account what CSAM did. CSAM would have detected the image with different resolutions or slight modifications. And your Mac sends all the hashes as well, whether they are in iCloud or not.
- akyuu 3y ago> And your Mac sends all the hashes as well, whether they are in iCloud or not. Could you elaborate? I didn't know Macs send local file hashes to Apple even if you don't use iCloud.
- nicce 3y agoIt is used to identify malicious files, in their words, on some scenarios. Gatekeeper sends all hashes of the opened executables/files. https://lapcatsoftware.com/articles/catalina-executables.html https://lapcatsoftware.com/articles/catalina-executables.htm... Also, the anti-virus sends, like Windows Defender et. all. They all do it to expand the storage of known files. > macOS includes built-in antivirus technology called XProtect for the signature-based detection and removal of malware https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web https://support.apple.com/guide/security/protecting-against-...
- sneak 3y agoCSAM is not the concern, society-wide surveillance of the spread of specific memetic information is. CSAM is the cover story. Winnie the Pooh memes are shared verbatim. Make one and share it and Apple knows who received it and when, and then who received it from them later, all with e2ee turned on and no iMessage.
- deleted 3y ago[deleted]