2 ms·
You can't because you don't have access to one of the algorithms.
by astrange 3y ago
You can't because you don't have access to one of the algorithms.
- logi_sko 3y agoWe don't actually have access to the first algorithm either, but it's been reverse engineered and a binary published. According to article.
- astrange 3y agoI should have said "algorithm deployment" or something. The main point is that on the server side, you can change the hash (or its seed) anytime you want, if the false positive rate is getting too high. It may be possible to do the same thing to the client actually.
- quitit 3y agoIn online people sometimes write things the way they want them to be, not the way they factually are. In small ways it comes across as wishful thinking, in other ways it's just plain old lying. I didn't feel that the comment trivialising multiple hash collisions was worth a direct reply, because the author is clearly not writing with bona fide intentions, or any real knowledge about an image scanning system. It's the fingers in ears, head in the sand kind of denialism that adds nothing to the conversation. My earlier comment already addressed what happens after the hashes match: a visual comparison. This isn't an original concept, it's a standard approach and part of earlier CSAM scanning proposals. One needs to act rather barefaced to pretend that a matched hash alone will have consequences, when we already have established that false positives are the known downside to using hash-based image matching.