News for hackers. Stuff that matters.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by echelon on Wednesday August 04, 2021 @10:56PM (#28069273)
That document you downloaded that is critical of the party will land you and your family in jail. Enjoy your iPhone.

Seriously, folks, we shouldn't celebrate Apple's death grip over their platform. It's dangerous for all of us. The more of you that use it, the more it creates a sort of "anti-herd immunity" towards totalitarian control.

Apple talks "privacy", but jfc they're nothing of the sort. Apple gives zero shits about your privacy. They're staking more ground against Facebook and Google, trying to take their beachheads. You're just a pawn in the game for long term control.

Apple cares just as much for your privacy as they do your "freedom" to run your own (un-taxed) software or repair your devices (for cheaper).

And after Tim Cook is replaced with a new regime, you'll be powerless to stop the further erosion of your liberties. It'll be too late.

Stop. Using. Apple.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by bigiain on Wednesday August 04, 2021 @11:05PM (#28069347)
> Stop. Using. Apple.

But is there a realistically better alternative? Pinephone with a personally audited Linux distro? A jailbroken Android device with a non-stock firmware that you built yourself? A homebuilt RaspberryPi based device? A paper notepad and a film camera and an out of print street map?

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @04:36AM (#28071243)
The best bet is probably a pixel phone with GrapheneOS. (Do note, that copperhead os is a scam and is not to be used)

Gnu/linux phones have nonexistent security, other than being niche (so security by obscurity at most). And also, they are not yet usable as a daily driver for me personally, at least.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @06:18AM (#28071802)
"Nonexistent security" is not an accurate description. It's just a totally different approach to security. It's verifiability.

https://puri.sm/posts/defending-against-spyware-like-pegasus...

https://source.puri.sm/Librem5/community-wiki/-/wikis/Freque...

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @06:25AM (#28071843)
That’s not how security works.

Whether or not I am allowed to check that my entrance has no locks whatsoever doesn’t make it harder to open it. And the reverse, even if I don’t know the details of the lock in my door, it will not let others pass through.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by tpxl on Thursday August 05, 2021 @06:47AM (#28071988)
> even if I don’t know the details of the lock in my door, it will not let others pass through.

You absolutely can not make that assertion without being able to verify the lock.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @07:22AM (#28072218)
What if I have a locksmith verify it for me? Like Apple and Android have been checked by several security researchers and while they absolutely have holes, there is are at least gates that can have them. Sandboxing is the bare minimum an OS should do if it wants to have third party applications installed.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @07:38AM (#28072316)
You can only hire someone to verify your lock if the lock is verifiable in the first place. Apple is trying to make it non-verifiable.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @08:11AM (#28072584)
Anything concrete on that?

For a fact we know that ios has strong sandboxing, secure bootchain and apps are revokably verified.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @08:27AM (#28072744)
> For a fact we know

Not sure about that. No source code. Also, Pegasus.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by tpxl on Thursday August 05, 2021 @06:47AM (#28071983)
> Do note, that copperhead os is a scam and is not to be used

Can you expand on this point a little bit?

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @07:31AM (#28072266)
While it may be biased, this is a great summary: https://grapheneos.org/history/

Basically Micay is a legitimate security researcher who created the project and it was later hijacked by the company funding some of it. That company since then try to badmouth Micay at any place they find and is doing shady things on top of the still open source code base. Micay was so professional to destroy the verification key at the time of the forking.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @06:21AM (#28071812)
> Pinephone with a personally audited Linux distro?

Even if you don't personally audit it, you still benefit from other people doing it. Especially if the software is reproducible (and many packages are).

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by j-james on Thursday August 05, 2021 @01:44AM (#28070274)
An Android device running non-stock is a realistically better scenario. The big problem there is that the state of Android drivers means your hardware options are severely cut down (in practice, to a selection about the size of Apple's - the Pixel line and some assorted others).
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by a-dub on Thursday August 05, 2021 @02:59AM (#28070698)
do you still get patches via google play services?
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by saurik on Thursday August 05, 2021 @03:55AM (#28071023)
With non-stock (assuming not jailbroken but just a totally different operating system) I think (I might be wrong... I should know for sure but I awkwardly don't) you aren't even allowed to use Google Play Services at all?
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by gabi32 on Thursday August 05, 2021 @11:33AM (#28075143)
You are allowed to use Google services. There is even an alternative called microG which is compatible with apps requiring Google serivices but it sends "fake" data to Google.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by a-dub on Thursday August 05, 2021 @04:06AM (#28071097)
back in the day it was not allowed, and then they allowed it somewhat begrudgingly. this was like 10y ago though.

no idea what the situation is now, but i wouldn't consider a phone that doesn't get those patches (project mainline) on time to be a serious option.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by marderfarker2 on Thursday August 05, 2021 @07:27AM (#28072241)
Viable alternatives were long gone. I really miss the days of Symbian and Meego, phones that are hackable yet intuitive to use (I.e. Nokia N900, N9).

Realistically now we have Tizen and Jolla OS, which had backings from Samsung but nobody gave two damn about it.

I bet even if any of these vanilla mobile OS gets big enough they’ll get bought by the 3 giants and suffocated to death just like how Microsoft sniped Nokia.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by ornornor on Thursday August 05, 2021 @09:31AM (#28073479)
Samsung is one of the companies I trust the least with regards to security, privacy, and overall competence in software.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by marderfarker2 on Thursday August 05, 2021 @01:01PM (#28076450)
Why though? How are they worse than Google for example?

Were there any recent examples where they failed in those?

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by bigiain on Friday August 06, 2021 @02:28AM (#28083930)
Not the parent commenter, but for me - Samsung are just as morally vacuous as Google, but are way less competent, at least on there software side (their component manufacture seems to be world class in at least some areas).

They'll happily do evil shit, and execute it poorly. Samsung are _way_ more likely to leak the unnecessarily and possibly illegally collected personal data they hoover up than Google are.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by echelon on Wednesday August 04, 2021 @11:13PM (#28069394)
Not really, and I'm not going to sway anyone deeply into the ecosystem.

My hope is that those of you that share my viewpoint will call your legislators and demand regulations or a break up. There are forces of good within the DOJ that are putting together an antitrust case against Apple, and the more of us that lend our voices, the louder and more compelling the argument.

The DOJ is really the last lever we have, and that's pretty good measure for the power Apple wields.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by wmf on Thursday August 05, 2021 @12:00AM (#28069723)
Other companies seem even less interested in fighting government surveillance so I don't see how weakening Apple will help anything.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by dylan604 on Wednesday August 04, 2021 @11:43PM (#28069620)
Wouldn't you think Apple is doing something like this at the behest of DoJ?
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by FractalHQ on Thursday August 05, 2021 @12:18AM (#28069817)
Too bad Apple and the rest of big money already have our legislators in their pockets.