Re:Apple enabling client-side CSAM scanning on iPhone tomorrow
by Fnoord on Thursday August 05, 2021 @06:11AM
(#28071760)
Of course not.
You'd only need a few important ones, and all you'd have to do is compromise them in one way or another. This can be done via coercion, via money, or by physically or virtually breaking into their system(s).
For example, if money can be an incentive, you can stimulate a FOSS dev to add a NOBUS vulnerability in code. Also, since all the code is public, organizations like NSA can do in-house fuzzing, keeping the findings to themselves.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow
by feanaro on Thursday August 05, 2021 @06:44AM
(#28071959)
And any other researcher can fuzz the code themselves too and make their findings public.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow
by fsflover on Thursday August 05, 2021 @07:10AM
(#28072125)
This is what happened with TrueCrypt. After that fork VeraCrypt was created, because you can never coerce everyone in the world.
Independent audits should help against backdoors. Again, the FLOSS nature of software and huge number of developers are essential here.
All millions of them at the same time?