Live data from Hacker News

Ask HN: What are you using to replace shared iCloud Photos albums?

news.ycombinator.com

51–60 of 111 posts

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#51

Is it the phone or only iCloud that scans for CSAM?

I get that CSAM is real and is hurtful. So are many other things: slavery, murder, etc etc.

But is the real-world instance of CSAM so high that every photo on every phone that is shared with another human needs to be scanned for it? It seems like there is no tradeoff too big to not be taken in the quest to eradicate CSAM.

Are the resources spent really proportional to the threat?

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#52
post #7

Earlier quoted context omitted.

Scanning all your photos in the cloud easily extends to checking all sorts of other things as well.

It does. However people have a greater expectation of privacy on a device they own than on a cloud-based solution where they have voluntarily uploaded content.

The scanning only takes place if you enable icloud libraries.

Your phone and photos app ask for this and you have to accept it before it is enabled. Sounds voluntarily to me.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#53
post #37

I would be classified as a pedo if my pictures were on iCloud... even if some of the naked kid is me... I also have pictures of my kids playing in the bath.

No? The scanner only checks for matches against images in NCMEC's database, so you can take as many pictures of your kids as you want, it won't trip the scanner.

Then what precludes the production of _new_ material? I thought that the whole effort was to protect children from future abuse?

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#54
post #37

I would be classified as a pedo if my pictures were on iCloud... even if some of the naked kid is me... I also have pictures of my kids playing in the bath.

Fortunately that’s not how it works. You would have to have a whole collection of known and identified CSAM to be classified as anything at all with the system Apple has announced.

No, their AI accepts some deviation. And we don't know how many false positives it takes to start a human review. And for privacy of course different people will evaluate different photos. And a human without context will flag a picture of a kid on the bath as child pornography. It is a very real possibility OP is made a suspect because of this.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#55
post #43
post #24

I’ve got a synology NAS that comes with a photos app that’s easy to use.

Same here. I also use their Cloud solution which is in EU. I am skeptical about it though but whatever.

I do use Backblaze do store a backup of the Synology Drive which contains de photos and other documents.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#56
post #9

You want an end to end encrypted cloud provider like ProtonDrive or Sync.com. You can also consider using rclone or Cryptomator to encrypt data before adding it to a consumer cloud sync solution. All come with the usual caveats (do you really trust Sync.com to withstand a state actor?) and user experience compromises.

Is there noticeable performance difference/loss of functionality? I did some encrypted text stuff before at rest and remembered to do a basic SQL select you have to decrypt everything (say column) first and then be able to search into it. So there is an added overhead... Maybe it doesn't matter with cloud processing or something.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#58

Earlier quoted context omitted.

Fortunately that’s not how it works. You would have to have a whole collection of known and identified CSAM to be classified as anything at all with the system Apple has announced.

No, their AI accepts some deviation. And we don't know how many false positives it takes to start a human review. And for privacy of course different people will evaluate different photos. And a human without context will flag a picture of a kid on the bath as child pornography. It is a very real possibility OP is made a suspect because of this.

Even if we accept that your image of your kids in the bath will match the hash of a known and identified CSAM picture (a real stretch), under this system the voucher payload does not contain the private key to decrypt the picture, so nobody will be able to evaluate a photo or flag it as anything. Humans have access to a “visual derivative” based on the perceptual mechanism used to create the hash, but not to the actual photo.

Other companies have CSAM scanning and reporting with much fewer safeguards and the “my kid in the bathtub” scenario hasn’t seemed to actually be a problem.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#59

Earlier quoted context omitted.

Mega and Stingle are the only options I'm aware of that are "truly" private, and every other major cloud storage provider will scan your files for CSAM. The best way forward for truly privacy conscious people would be to roll their own NextCloud instance, because any public service that allows you to store E2EE images will get hunted by the Government for allowing CSAM if they reach any significant userbase. Case in…

Dumb question but would an S3 bucket be scanned by CSAM? Ehh idk seems like a dumb concern/losing battle. My thing is about IP. I picked up this e-ink tablet and it syncs to their cloud service for example. Which you can stop but still... Ahh. Just feels like going in circles, ISP knows your content, VPN, is your device actually secure, etc... Do you have anything to hide anyway. I'm probably just paranoid ha I quest…

An s3 bucket will give you back an ETAG header for each file it holds, which is more or less the MD5 of a set of chunks that make up the file.

You can use that to identify files.

Re: Ask HN: What are you using to replace shared iCloud Photos albums?

#60
Personally I don't trust anything that I don't self-host. With Hetzner I chose full-metal instead of VPS. I pay €40 for 4 TB (2x4 TB mirrored to be precise) shared among a large number of services, including Minecraft servers for kids. The load is very low and the maintenance is a pleasure. Plus I love tinkering with and learning new things, so this part of mine is fully satisfied. I learned with Hetzner that every 3 years or so a hard drive dies but they replace it within half an hour so I just let the RAID rebuild itself and that's all.
Post reply on HN