Apple enabling client-side CSAM scanning on iPhone tomorrow

Post by gruez » Thu, Aug 05, 2021, 6:03 PM UTC

warkdarrior wrote: post #654

gruez wrote: post #489

Earlier quoted context omitted.

>windows TPM aren’t snitching on you? The TPM FUD has really gone out of hand. 1. there's no such thing as "windows TPMs", whatever that means. 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.

> 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it. That's the specification. Have you actually monitored the bus using probes? Did you check that the TPM is only connected to LPC?

Post by tomaskafka » Thu, Aug 05, 2021, 6:18 PM UTC

zepto wrote: post #586

tomaskafka wrote: post #297

Earlier quoted context omitted.

A country can collect a list of people sharing any content they put on a hash list. Like gay porn, 'save Khashoggi' meme, or a photo from documentary about missing Uighurs. It's hard to imagine how this could be misused, right?

That seems like a real problem, and of course it could be misused, however nothing so far revealed actually tells us whether it is possible. E.g. how the hashes are computed, where they come from, and what happens when a positive match is detected. Until we have a clear understanding of these things, the rest is just speculation.

Post by acdha » Thu, Aug 05, 2021, 7:00 PM UTC

fsflover wrote: post #658

acdha wrote: post #511

Earlier quoted context omitted.

> >99% of the population will delegate the decision of what code is allowed to run to someone, be it the manufacturer, the government, some guy on the Internet or whatever. For that 99% of the population, by the way, it's actually more beneficial to have restrictions on what software can be installed to avoid malware > I do not agree with this. You are saying people are too stupid to make decisions and that is amoral…

> How much of the code running on your data do you personally inspect? https://news.ycombinator.com/item?id=28072201

Post by josephcsible » Thu, Aug 05, 2021, 7:37 PM UTC

relax88 wrote: post #532

fsflover wrote: post #482

Earlier quoted context omitted.

Nothing is ever perfectly secure. It's a question of whom you should trust for a lesser damage.

Apple spends a hell of a lot more time and money verifying that my iPhone is secure than say… the developers of any number of the mobile Linux ports. Plus the hardware is nice and actually works. I agree with what you say in principle but here I am using an iPhone to type this while it’s been nearly 2 years since I ordered my Librem 5. Making decent mobile devices that are more secure than an iPhone is not an easy th…

Post by hncurious » Thu, Aug 05, 2021, 7:45 PM UTC

snarf21 wrote: post #500

keyme wrote: post #221

Dear humans, 1) You willingly delegated the decision of what code is allowed to run on your devices to the manufacturer (2009). Smart voices warned you of today's present even then. 2) You willingly got yourself irrevocably vendor-locked by participating in their closed social networks, so that it's almost impossible to leave (2006). 3) You willingly switched over essentially all human communication to said social ne…

Great, so what's the solution? What are you doing to fix it? Do you roll your own silicon? Do you grow your own food (we have no idea what someone could be putting in it)? Are you completely off-grid? Or are you as completely dependent on society writ large as everyone else? Making holier than thou comments about everyone else being sheep isn't helpful or thought provoking. Offer an alternative if it is a bad one (lo…