3 ms·
> They don't need to. iCloud uploads plaintext content hashes of all files even when e2ee is turned on. However, regular hashes (SHA256 et al.) are too strict,
by nicce 3y ago
> They don't need to. iCloud uploads plaintext content hashes of all files even when e2ee is turned on.
However, regular hashes (SHA256 et al.) are too strict, and these hashes are mostly useless for this use case. The don't take variance in account what CSAM did. CSAM would have detected the image with different resolutions or slight modifications.
And your Mac sends all the hashes as well, whether they are in iCloud or not.
- akyuu 3y ago> And your Mac sends all the hashes as well, whether they are in iCloud or not. Could you elaborate? I didn't know Macs send local file hashes to Apple even if you don't use iCloud.
- nicce 3y agoIt is used to identify malicious files, in their words, on some scenarios. Gatekeeper sends all hashes of the opened executables/files. https://lapcatsoftware.com/articles/catalina-executables.html https://lapcatsoftware.com/articles/catalina-executables.htm... Also, the anti-virus sends, like Windows Defender et. all. They all do it to expand the storage of known files. > macOS includes built-in antivirus technology called XProtect for the signature-based detection and removal of malware https://support.apple.com/guide/security/protecting-against-malware-sec469d47bd8/web https://support.apple.com/guide/security/protecting-against-...
- sneak 3y agoCSAM is not the concern, society-wide surveillance of the spread of specific memetic information is. CSAM is the cover story. Winnie the Pooh memes are shared verbatim. Make one and share it and Apple knows who received it and when, and then who received it from them later, all with e2ee turned on and no iMessage.