Live data from Hacker News

Apple's child protection features spark concern within its own ranks: sources

reuters.com

691–700 of 860 posts

Re: Apple's child protection features spark concern within its own ranks: sources

#691

This was such a weird way for them to announce that they’re no longer pursuing privacy as a differentiation strategy.

The whole reason why they come up with that complicated on-device scan instead of simply scanning their server is because they are trying to push e2ee, on the contrary.

Re: Apple's child protection features spark concern within its own ranks: sources

#692

Earlier quoted context omitted.

> Apple privacy focus was always opportunistic: they couldn't get a foothold into online advertising so they decided to make that weakness a selling point instead. You could spin that the other way: Apple’s foray into advertising was opportunistic, but didn’t sit with their focus on privacy. You’d need internal memos to prove it went either way.

You could, but it seems more likely that a mega corporation gave up on a huge market because it failed to succeed there rather than moral principles. It's not like Apple has showed a lot of moral standing when dealing with the CCP, or isn't ruthlessly crushing competition when it gets the chance.

I have a friend who knows Apple's head of user privacy. He vouches that the guy is deeply serious about security/privacy.

Between that and Apple's principled stance against the FBI, I'm inclined to believe that at that time, they were making principled choices out of a real concern for user privacy.

I suspect this time around they have a real concern for dealing with the growing child exploitation/abuse problem, but failed to prioritize system design principles in their zeal to pursue positive change in the world.

I don't envy them: in their position, they have an incredible amount of pressure and the stakes are incredibly high.

May cool heads and rational, principled thinking prevail.

Re: Apple's child protection features spark concern within its own ranks: sources

#693

Earlier quoted context omitted.

Why? It's already been well-reported that Apple makes a teeny fraction of the NCMEC reports that other large cloud providers make, and that the reason they hold the keys to iCloud backups was from some requests/pressure from the FBI.

What other "large cloud providers"? Ones that are similar to Apple? Or general cloud companies? And is "pressure from the FBI" really the only reason why Apple might hold backup keys? Please sketch out your "lost device, need to restore from backup" user journey. For a real person, who has only an iPhone.

> Please sketch out your "lost device, need to restore from backup" user journey. For a real person, who has only an iPhone.

How about "enter your master passphrase to access your photos". Like literally all syncing password managers work, or things like Authy work to back up your one-time password seeds. It's not complicated.

Re: Apple's child protection features spark concern within its own ranks: sources

#694
post #567

Earlier quoted context omitted.

> Authoritarian countries are the least of the worries. That really depends. And is quite a strange, perhaps worrying, take. Because, for many people, copyright strikes are the least of their problems. Not that I disagree on it being an issue.

The only authoritarian country that holds any sway over Apple is China and China can easily just ban iPhones if they feel like it, especially with Xi Jinping in charge. Democratic countries are much more of a danger because Apple has offices in them and cannot easily pull out of the market if they feel the laws are unconscionable.

Russia already forced Apple to allow pre-installing government approved apps on local iPhones: https://www.theverge.com/2021/3/16/22334641/apple-follows-ru...

Re: Apple's child protection features spark concern within its own ranks: sources

#695

Earlier quoted context omitted.

Apple privacy focus was always opportunistic: they couldn't get a foothold into online advertising so they decided to make that weakness a selling point instead. They'll ditch privacy in a second if they can sell you enough ads, just as they ditched privacy for Chinese customers when the Chinese government asked them to.

> Apple privacy focus was always opportunistic: they couldn't get a foothold into online advertising so they decided to make that weakness a selling point instead. You could spin that the other way: Apple’s foray into advertising was opportunistic, but didn’t sit with their focus on privacy. You’d need internal memos to prove it went either way.

The focus on privacy was new and only after their focus on advertising failed.

Re: Apple's child protection features spark concern within its own ranks: sources

#696

Earlier quoted context omitted.

Could they though? An authoritarian government could just as easily say "if you do not implement this feature, we will not allow you to operate in this country" and refuse to entertain legal challenges.

Authoritarian countries are the least of the worries. There's a large class of illegal imagery that is policed in democratic countries: copyrighted media. We are only two steps away from having your phone rat you to the MPAA because you downloaded a movie and stored it on your phone. I can guarantee that some industry bigwigs are salivating at the prospect of this tech. Imagine youtube copyright strikes but local to…

This would have been a huge fear of mine if this was 10 or 15 years ago and legitimate publishers were still engaging in copyright litigation for individual noncommercial pirates. The RIAA stopped doing individual lawsuits because it was surprisingly expensive to ruin people's lives that way over a handful of songs. This largely also applies to the MPAA as well. The only people still doing this in bulk are copyright trolling outfits - companies like Prenda Law and Malibu Media. They make fake porn, covertly share it and lie to the judge about it, sue you, and then offer a quick and easy settlement route.

(Yes, I know, it sounds like I'm splitting hairs distinguishing between copyright maximalism and copyright trolling. Please, humor me.)

What copyright maximalists really want is an end to the legal protections for online platforms (DMCA 512 safe-harbor) so they can go after notorious markets directly. They already partially accomplished this in the EU. It's way more efficient from their end to have one throat to choke. Once the maximalists get what they want, platforms that want to be legitimate would be legally compelled to implement filters, ala YouTube Content ID. But those filters would apply to content that's published on the platform, not just things on your device. Remember: they're not interested in your local storage. They want to keep their movies and music off of YouTube, Vimeo, Twitter, and Facebook.

Furthermore, they largely already have the scanning regime they want. Public video sites make absolutely no sense to E2E encrypt; and most sites that deal in video already have a content fingerprinting solution. It turns out it was already easy enough to withhold content licenses to platforms that accept user uploads, unless they agreed to also start scanning those uploads.

(Side note: I genuinely think that the entire concept of safe harbors for online platforms is going to go away, just as soon as the proposals to do so stop being transparently partisan end-runs around the 1st Amendment. Pre-Internet, the idea that an entity could broadcast speech without having been considered to be the publisher of it didn't really exist. Publishers were publishers and that was that.)

Re: Apple's child protection features spark concern within its own ranks: sources

#697

In their attempt to make this extra private by scanning 'on device', I think they've managed to make it feel worse. If they scan my iCloud photos in iCloud, well lots of companies scan stuff when you upload it. It's on their servers, they're responsible for it. They don't want to be hosting CSAM. It feels much worse them turning your own, trusty iPhone against you. I know that isn't how you should look at it, but tha…

I think its just more visible, its easy to upload to the internet and think im uploading to the internet, you don't think I am sharing this with law enforcement and Apples third parties.

Re: Apple's child protection features spark concern within its own ranks: sources

#698

This CSAM Prevention initiative by Apple is a 180 degress change of their general message around privacy. Imagine investing hundreds of millions of dollars in pro-privacy programs, privacy features, privacy marketing, etc... just to pull this reverse card. Of course this is going to spark concern within their own ranks. It's like working for a food company that claims to use organic, non-processed, fair-trade ingredi…

Apple was never pro-privacy. Apple has always been pro-Apple. They will do whatever benefits them the most at any time. It just so happens that with the failure of their own attempts to start an advertising network, they saw an opportunity to spin themselves as the privacy company and take digs at their competitors. Nothing lasts forever. Maybe it's time for a new spin.

Re: Apple's child protection features spark concern within its own ranks: sources

#699

Earlier quoted context omitted.

Yea, I agree. I see so many comments where people view the issue is black and white and that apple is clearly in the wrong. Yes, privacy is a great ideal. There are absolute monsters in this world and there is zero chance that no apple employees have brushed up against those monsters. I would ask that every single developer step back and think about putting themselves into a situation where software that you write is…

Easy. When I was young, I was not effectively spied on. My activity and digital trail were ephemeral, and hard to pin down. i wasn't the subkect of constant analysis and scrutiny. I had the privilege of being invited into the engine of an idling train to share an Engineer's drinks along with my parents and no one batted an eye. There were pedophiles then too. guess what? We didn't sacrifice everyone's right to privac…

> We didn't sacrifice everyone's right to privacy. We didn't lock more and more rights out of the reach of minors.

No. My elders and society just denied the monsters existed. And punished any one who talked about it.

Re: Apple's child protection features spark concern within its own ranks: sources

#700

This CSAM Prevention initiative by Apple is a 180 degress change of their general message around privacy. Imagine investing hundreds of millions of dollars in pro-privacy programs, privacy features, privacy marketing, etc... just to pull this reverse card. Of course this is going to spark concern within their own ranks. It's like working for a food company that claims to use organic, non-processed, fair-trade ingredi…

If a grandmother takes a photo of their grandchild in a bathtub this is technically against federal law 18 U.S.C. § 2252. There is no "I am grandma" exception. This is a serious felony with serious consequences. If you use an algorithm without any context I think you are looking at a ton of new 18 U.S.C. § 2252 (child pornography) charges through these scans. These charges are notoriously difficult to defend against and even the charge itself will ruin lives and careers [1]. Getting custody back of your child will also be impossible [found guilty or not]. I am getting my popcorn ready. Apple has no idea what they have unleashed.

https://www.nbcnews.com/id/wbna8161067

* edit: hahaha downvotes thanks apple employees!

Post reply on HN