Live data from Hacker News

The Problem with Perceptual Hashes

rentafounder.com

241–250 of 440 posts

Re: The Problem with Perceptual Hashes

#241

Earlier quoted context omitted.

Airport baggage drug dogs must obviously have far fewer false positives than that. So alerting on everything can't be the state of the art.

https://reason.com/2021/05/13/the-police-dog-who-cried-drugs... > Similar patterns abound nationwide, suggesting that Karma's career was not unusual. Lex, a drug detection dog in Illinois, alerted for narcotics 93 percent of the time during roadside sniffs, but was wrong in more than 40 percent of cases. Sella, a drug detection dog in Florida, gave false alerts 53 percent of the time. Bono, a drug detection dog in Vi…

Out of how many dogs? We’re these outliers or the regular thing?

Re: The Problem with Perceptual Hashes

#242

Earlier quoted context omitted.

A couple gigabytes is enough to ruin someone’s day but not a lot to surreptitiously transfer, it’s literally seconds. Just backdate them and they may very well go unnoticed.

It's also possible to 'hide' photos from the reel in the photos app. Many people are unaware of that feature so an attacker could hide as many photos they want in your iCloud.

Assmuning they have access

Re: The Problem with Perceptual Hashes

#243

Given all the zero day exploits on iOS I wonder if it's now going to be viable to hack someone's phone and upload child porn to their account. Apple with happily flag the photos and then, likely, get those people arrested. Now they have to, in practice, prove they were hacked which might be impossible. Will either ruin their reputation or put them in jail for a long time. Given past witch hunts it could be decades be…

You don't even need hacking for this to be abused by malevolent actors. A wife in a bad marriage could simply take nude pictures of their child to falsely accuse her husband.

This tech is just ripe for all kind of abuses.

Re: The Problem with Perceptual Hashes

#244
post #110

The problem of hash or NN based matching is, the authority can avoid explaining the mismatch. Suppose the authority want to false-arrest you. They prepare a hash that matches to an innocent image they knew the target has in his Apple product. They hand that hash to the Apple, claiming it's a hash from a child abuse image and demand privacy-invasive searching for the greater good. Then, Apple report you have a file th…

> Suppose the authority want to false-arrest you.

Why would they want that?

Re: The Problem with Perceptual Hashes

#245
post #244
post #110

The problem of hash or NN based matching is, the authority can avoid explaining the mismatch. Suppose the authority want to false-arrest you. They prepare a hash that matches to an innocent image they knew the target has in his Apple product. They hand that hash to the Apple, claiming it's a hash from a child abuse image and demand privacy-invasive searching for the greater good. Then, Apple report you have a file th…

> Suppose the authority want to false-arrest you. Why would they want that?

Oh, sweet, naive child.

Re: The Problem with Perceptual Hashes

#246
post #244
post #110

The problem of hash or NN based matching is, the authority can avoid explaining the mismatch. Suppose the authority want to false-arrest you. They prepare a hash that matches to an innocent image they knew the target has in his Apple product. They hand that hash to the Apple, claiming it's a hash from a child abuse image and demand privacy-invasive searching for the greater good. Then, Apple report you have a file th…

> Suppose the authority want to false-arrest you. Why would they want that?

Corruption. Lack of evidence on some other cases. Personal revenge. Who knows, but list is big.

Re: The Problem with Perceptual Hashes

#247
post #155
post #110

The problem of hash or NN based matching is, the authority can avoid explaining the mismatch. Suppose the authority want to false-arrest you. They prepare a hash that matches to an innocent image they knew the target has in his Apple product. They hand that hash to the Apple, claiming it's a hash from a child abuse image and demand privacy-invasive searching for the greater good. Then, Apple report you have a file th…

Well, presumably at that point, someone in that position would just reveal their own files with the hash an prove to the public that they weren't illegal. Sure, it would be shitty to be forced to reveal your private information that way, but you would expose a government agency as fabricating evidence and lying about the contents of the picture in question to falsely accuse someone. It seems like that would be a scan…

”Sorry, but collisions happen with all hashing algorithms, and you can’t prove otherwise. It is just a matter of time. Nothing to see here.”

Re: The Problem with Perceptual Hashes

#249
post #156
post #72

The technical challenges aside, I’m very disturbed that my device will be reporting me to the authorities. That’s very different from authorities taking a sneak peek into my stuff. That’s like the theological concept of always being watched. It starts with child pornography but the technology is indifferent towards it, it can be anything. It’s always about the children because we all want to save the children. Soon t…

With you up to here, but this is jumping the shark > I bet you, after the next election in the US your device will be reporting you for spreading far right or deep state lies, depending on who wins. The US is becoming less stable, sure [1], but there is still a very strong culture of free speech, particularly political speech. I put the odds that your device will be reporting on that within 4 years as approximately 0…

> but there is still a very strong culture of free speech, particularly political speech.

Free speech didn't seem so important recently when the SJW crowd started mandating to censor certain words because they're offensive.

Re: The Problem with Perceptual Hashes

#250

I do not know as much about perceptual hashing as I would like, but have considered it for a little project of my own. Still, I know it has been floating around in the wild. I recently came across it on Discord when I attempted to push an ancient image, from the 4chan of old, to a friend, which mysteriously wouldn't send. Saved it as a PNG, no dice. This got me interested. I stripped the EXIF data off of the original…

I had to go search for that image. Love it.

>> in the Gibsonian sense

Nice turn of phrase. Can't wait to see what the street's use cases are going to be for this wonderful new spyware. Something nasty, no doubt.

Post reply on HN