Apple enabling client-side CSAM scanning on iPhone tomorrow

#1

Post by robbiet480 » Thu, Aug 05, 2021, 1:39 AM UTC

Apple enabling client-side CSAM scanning on iPhone tomorrow
twitter.com

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#2

Post by robbiet480 » Thu, Aug 05, 2021, 1:47 AM UTC

This has worrying privacy implications. I hope Apple makes a public announcement about this but wouldn’t be surprised if they don’t. I also would expect EFF will get on this shortly.

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#3

Post by ajsnigrutin » Thu, Aug 05, 2021, 2:03 AM UTC

So if I understand correctly, they want to scan all your photos, stored on your private phone, that you paid for, and they want to check if any of the hashes are the same as hashes of child porn?

So... all your hashes will be uploaded to the cloud? How do you prevent them from scanning other stuff (memes, leaked documents, trump-fights-cnn-gif,... to profile the users)?

Or will a huge hash database of child porn hashes be downloaded to the phone?

Honestly, i think it's one more abuse of terrorism/child porn to take away privacy of people, and mark all oposing the law as terrorists/pedos.

...also, as in the thread from the original url, making false positives and spreading them around (think 4chan mass e-mailing stuff) might cause a lot of problems too.

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#4

Post by willis936 » Thu, Aug 05, 2021, 2:06 AM UTC

ajsnigrutin wrote: post #3

So if I understand correctly, they want to scan all your photos, stored on your private phone, that you paid for, and they want to check if any of the hashes are the same as hashes of child porn? So... all your hashes will be uploaded to the cloud? How do you prevent them from scanning other stuff (memes, leaked documents, trump-fights-cnn-gif,... to profile the users)? Or will a huge hash database of child porn hash…

>So... all your hashes will be uploaded to the cloud?

That isn't how I interpret "client-side".

The privacy implications are far more subtle.

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#5

Post by jhayward » Thu, Aug 05, 2021, 2:08 AM UTC

I wonder when I gave Apple permission to do this?

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#6

Post by BluSyn » Thu, Aug 05, 2021, 2:14 AM UTC

I understand the hesitation here, but fundamentally this is like trying to close pandoras box. If something is technically possible to do AND governments demand it be done, it will be done. If not by Apple, by someone else.

Rather than complain about it, I am interested in what alternative solutions exist, or how concerns regarding privacy and abuse of this system could be mitigated.

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#7

Post by vmception » Thu, Aug 05, 2021, 2:18 AM UTC

That tweet thread is saying it will scan for hashes client side and upload the result, circumventing E2E encryption, but then says theyre just going to do it on your icloud backups because they dont have E2E encryption, so which is it?

All?

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#8

Post by vmception » Thu, Aug 05, 2021, 2:19 AM UTC

Sucks since we pay for icloud backups and get the lesser service

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#9

Post by edge17 » Thu, Aug 05, 2021, 2:31 AM UTC

I'm assuming android/google must do this already?

Re: Apple enabling client-side CSAM scanning on iPhone tomorrow

#10

Post by TedDoesntTalk » Thu, Aug 05, 2021, 2:33 AM UTC

jhayward wrote: post #5

I wonder when I gave Apple permission to do this?

I’m sure It’s in the TOS.