71–80 of 111 posts
Personally I don't trust anything that I don't self-host. With Hetzner I chose full-metal instead of VPS. I pay €40 for 4 TB (2x4 TB mirrored to be precise) shared among a large number of services, including Minecraft servers for kids. The load is very low and the maintenance is a pleasure. Plus I love tinkering with and learning new things, so this part of mine is fully satisfied. I learned with Hetzner that every 3…
I have always used Mega[0]. It's real end to end encryption. I would argue it also has a superior user experience across all the others. [0] https://mega.nz/
Earlier quoted context omitted.
No? The scanner only checks for matches against images in NCMEC's database, so you can take as many pictures of your kids as you want, it won't trip the scanner.
Considering it's a perceptual hash match, some difference is accepted. Such confidence in the infallibility of these methods usually precedes the method being used to go jail some poor innocent bastard. After all, if he wasn't guilty, it wouldn't have tripped the scanner.
Earlier quoted context omitted.
> specific photographs That's the catch. Nothing in the system design prevents them from adding hashes of other types of photographs to that database. > And do you seriously think they didn’t check the legality of what they built? IANAL, but the law clearly states that transmitting CSAM to any party other than NCMEC is a felony. Apple != NCMEC. More info: https://www.hackerfactor.com/blog/index.php?/archives/929-On..…
“IANAL” is used to avoid liability for offering legal advice in settings where it’s not permitted. It’s not used to hand wave away that you don’t know what you’re talking about. The very same law you’re citing describes, in detail, the good faith diligence process that requires the service provider to verify the suspected material before transmission to NCMEC. But no, some random blog and you, you two have a handle o…
You don't have to "do" Nextcloud yourself if you don't want to. Find a hoster[0] that does the work for you. The client apps and the user interface are super boomer friendly. [0] https://nextcloud.com/partners/
The iOS client is excellent but to be totally transparent sometimes the app does need to be opened to make sure the photo sync happens.
It may not have the same integration options but it's better than the alternatives.
Earlier quoted context omitted.
> specific photographs That's the catch. Nothing in the system design prevents them from adding hashes of other types of photographs to that database. > And do you seriously think they didn’t check the legality of what they built? IANAL, but the law clearly states that transmitting CSAM to any party other than NCMEC is a felony. Apple != NCMEC. More info: https://www.hackerfactor.com/blog/index.php?/archives/929-On..…
There’s nothing in the design sure, because new photo hashes do need to be added. But they will will be CSAM images, as explained here: https://pingthread.com/thread/1424873629003702273 People should really stop using this “conspiracy theory” as a reason for Apple to not scan for CSAM in a privacy-preserving fashion. There are way too many “hot takes” that don’t take into account any legal ramifications of their “wha…
This is probably the best design we have so far for something that everyone else is already doing, and I give Apple credit for going to greater lengths to preserve privacy.
But the “just trust us, we only want to do good things and we will be ruined if you ever catch us doing bad things” rationale doesn’t help. In fact it sends me right back into protest every time I’ve seen it posted.
There will not be legal ramifications for “what if” scenarios. Not enough to prevent abuse.
Especially if these would be the same (weak) legal ramifications that prevent people from being wrongfully accused of murder, arrested for peaceful protest, or bank accounts frozen on baseless suspicion of fraud or terrorism.
From the same government that has treated legitimate political beliefs and entire religions as terrorism.
If the core defense is that I should just trust that NCMEC exists for a single purpose, will never be manipulated or expand outside that purpose, and is completely uninterested in carrying out any other agenda, then that defense has already lost.
Because that exact scenario has already occurred with other government agencies.
And suggesting that NCMEC is somehow at such a disadvantage in power that Apple has a choice to say “no” (and that Apple will do so at even the slightest hint of impropriety) and that alone will bring NCMEC and all of the good work they do crashing down?
I bought this reasoning fully with the Patriot Act and warrantless wiretaps. I had no doubt these things were being used to do good and prevent deaths, and I’m sure they have.
But I have also since seen enough to know that short term good will was paid for by the long term ruining of innocent lives, and racial profiling that continues to this day.
I’m not interested in supporting that again.
I’m good with “Apple is trying to steer this in a more privacy respecting direction” and “this introduces a new avenue in which NCMEC introduces more checks and balances by having third parties double check their work”.
I’m saying this as someone who is torn about this issue.
But the “separate government organization that will absolutely not bend to pressure and will suffer legal consequences if they do, JUST TRUST US KTHX” reasoning already has such strong precedence of being proven false, it only works against your case.