4 ms·

You'll still need an iPhone, the verification is linked to the specific iPhone, and the specific iPhone is linked to you.

by mitxela 1mo ago

throw0101c 1mo ago
> You'll still need an iPhone, the verification is linked to the specific iPhone, and the specific iPhone is linked to you. Unless you use a friend's iPhone, or an iPhone you 'rented' for 5 minutes for $20 from someone on Craigslist or Facebook Marketplace to take a picture on and then Airdrop to you.
- mitxela 1mo ago
  Buying a new overpriced phone every time you want to take a picture is certainly a decision.
- autoexec 1mo ago
  If they airdrop it to you that typically requires you to have an iphone or a mac and airdrop users are able to be identified and tracked so the photo could still be linked to your device. The EU forced apple to use Wi-Fi Aware though, so unless that's similarly vulnerable people in the EU might be able to avoid those issues.
  - propaganja 1mo ago
    What? Just send the photo using literally any other method. Am I missing something, or did everyone just waste two minutes of their lives reading this?
    - tmp10423288442 1mo ago
      Only wasted two minutes if you read really slowly
  - lxgr 1mo ago
    Airdrop has been supported on many Android devices even outside the EU for a while now: https://www.android.com/quick-share/with-iphone/ https://www.android.com/quick-share/with-iphone/ Or you could just email/WhatsApp/... it.
  - throw0101c 1mo ago
    > If they airdrop it to you that typically requires you to have an iphone or a mac […] Perhaps do not be so literal: Airdrop, SMS/MMS/RCS, WhatsApp, Signal, etc: * https://github.com/localsend/localsend https://github.com/localsend/localsend
    - autoexec 1mo ago
      I agree, lots of alternatives to the specific one you suggested exist and would probably be better.
alwillis 1mo ago
The reference image isn't linked to any particular iPhone or person: We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public association between different photos taken by the same sensor. The final reference image is instead signed by Apple’s signing service, after validation by PCC. That signature is backed by Apple’s strongest technical guarantees. Our implementation also protects the confidentiality of the image itself, including from Apple. Merely capturing a reference image should never expose the actual pixels to Apple or anyone else. We achieve this through the exceptional privacy properties of PCC — the nodes themselves are architected so that not even Apple can access image data, just as Apple cannot see the information processed for Apple Intelligence in PCC.
- microtonal 1mo ago
  The reference image isn't linked to any particular iPhone or person It is for Apple, to the extend that if there are backdoors and weaknesses in their PCC, they could register a device signing identity to Apple signature mapping. I think the line of reasoning is that you have to trust Apple anyway, since they could also roll out a malicious image to your particular phone, but I still feel like PCC is much harder to verify/audit than an iPhone already is.

You'll still need an iPhone, the verification is linked to the specific iPhone, and the specific iPhone is linked to you.

by mitxela 1mo ago

You'll still need an iPhone, the verification is linked to the specific iPhone, and the specific iPhone is linked to you.

throw0101c 1mo ago

> You'll still need an iPhone, the verification is linked to the specific iPhone, and the specific iPhone is linked to you. Unless you use a friend's iPhone, or an iPhone you 'rented' for 5 minutes for $20 from someone on Craigslist or Facebook Marketplace to take a picture on and then Airdrop to you.

mitxela 1mo ago
Buying a new overpriced phone every time you want to take a picture is certainly a decision.
autoexec 1mo ago
If they airdrop it to you that typically requires you to have an iphone or a mac and airdrop users are able to be identified and tracked so the photo could still be linked to your device. The EU forced apple to use Wi-Fi Aware though, so unless that's similarly vulnerable people in the EU might be able to avoid those issues.
- propaganja 1mo ago
  What? Just send the photo using literally any other method. Am I missing something, or did everyone just waste two minutes of their lives reading this?
  - tmp10423288442 1mo ago
    Only wasted two minutes if you read really slowly
- lxgr 1mo ago
  Airdrop has been supported on many Android devices even outside the EU for a while now: https://www.android.com/quick-share/with-iphone/ https://www.android.com/quick-share/with-iphone/ Or you could just email/WhatsApp/... it.
- throw0101c 1mo ago
  > If they airdrop it to you that typically requires you to have an iphone or a mac […] Perhaps do not be so literal: Airdrop, SMS/MMS/RCS, WhatsApp, Signal, etc: * https://github.com/localsend/localsend https://github.com/localsend/localsend
  - autoexec 1mo ago
    I agree, lots of alternatives to the specific one you suggested exist and would probably be better.

alwillis 1mo ago

The reference image isn't linked to any particular iPhone or person: We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public association between different photos taken by the same sensor. The final reference image is instead signed by Apple’s signing service, after validation by PCC. That signature is backed by Apple’s strongest technical guarantees. Our implementation also protects the confidentiality of the image itself, including from Apple. Merely capturing a reference image should never expose the actual pixels to Apple or anyone else. We achieve this through the exceptional privacy properties of PCC — the nodes themselves are architected so that not even Apple can access image data, just as Apple cannot see the information processed for Apple Intelligence in PCC.

microtonal 1mo ago
The reference image isn't linked to any particular iPhone or person It is for Apple, to the extend that if there are backdoors and weaknesses in their PCC, they could register a device signing identity to Apple signature mapping. I think the line of reasoning is that you have to trust Apple anyway, since they could also roll out a malicious image to your particular phone, but I still feel like PCC is much harder to verify/audit than an iPhone already is.