• plz1@lemmy.world
    link
    fedilink
    English
    arrow-up
    83
    ·
    1 year ago

    Man, I remember the controversy when this initiative launched. Can’t please anyone, it seems.

    • skymtf
      link
      fedilink
      English
      arrow-up
      41
      ·
      1 year ago

      I never supported since it was on device and given this is the US hashes to spot “extremism could be added” given apple doesn’t know what the hashes are.

      • abhibeckert@lemmy.world
        link
        fedilink
        English
        arrow-up
        28
        ·
        edit-2
        1 year ago

        No you’re wrong.

        They are not cryptographic hashes. They are “perceptual” hashes or “fuzzy” hashes. They’re basically just a low resolution copy of the original image. It’s trivial for an attacker to maliciously send innocent seeming images that are a hash collision. This is, by the way, a feature not a bug. Perceptual hashes are not designed to perform a perfect match.

        There are plenty of free white-papers on how perceptual hashes work, and Facebook’s implementation is even open source.

        Apple said they tested 100 million perfectly legal images and three had collisions with a CSAM perceptual hash. When you consider how many photos Apple was proposing to scan (hundreds of trillions of photos) that means thousands of false positives would have occurred even if nobody maliciously abused the system.

        And because of all that - Apple was planning to do human reviews of every photo. They would, therefore, have seen every match (and every false positive). It couldn’t have been hidden from Apple.

      • Edgelord_Of_Tomorrow@lemmy.world
        link
        fedilink
        English
        arrow-up
        26
        ·
        1 year ago

        Nobody cared it was running on iCloud. People cared it was going to be running on their phones, scanning literally everything they had.

      • deweydecibel@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        ·
        edit-2
        1 year ago

        The consumer is not at fault for believing their personal data on their own hardrive, in the phone they paid for, should not be seen by anyone but themselves if they do not choose it to be.

        It’s not the consumers fault for believing this to be the case given this is how computer technology always worked.

        Their only fault is for using Apple, when Apple has gone to extreme lengths to blur the line between what is your and what is theres, and effectively makes it impossible to keep things on your phone only on your phone unless you opt out of iCloud entirely. iCloud is so integrated, it’s not clear to the user that everything on the phone is also on the cloud, and therefore not private.