News for hackers. Stuff that matters.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @06:18AM (#28071802)
"Nonexistent security" is not an accurate description. It's just a totally different approach to security. It's verifiability.

https://puri.sm/posts/defending-against-spyware-like-pegasus...

https://source.puri.sm/Librem5/community-wiki/-/wikis/Freque...

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @06:25AM (#28071843)
That’s not how security works.

Whether or not I am allowed to check that my entrance has no locks whatsoever doesn’t make it harder to open it. And the reverse, even if I don’t know the details of the lock in my door, it will not let others pass through.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by tpxl on Thursday August 05, 2021 @06:47AM (#28071988)
> even if I don’t know the details of the lock in my door, it will not let others pass through.

You absolutely can not make that assertion without being able to verify the lock.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @07:22AM (#28072218)
What if I have a locksmith verify it for me? Like Apple and Android have been checked by several security researchers and while they absolutely have holes, there is are at least gates that can have them. Sandboxing is the bare minimum an OS should do if it wants to have third party applications installed.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @07:38AM (#28072316)
You can only hire someone to verify your lock if the lock is verifiable in the first place. Apple is trying to make it non-verifiable.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kaba0 on Thursday August 05, 2021 @08:11AM (#28072584)
Anything concrete on that?

For a fact we know that ios has strong sandboxing, secure bootchain and apps are revokably verified.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @08:27AM (#28072744)
> For a fact we know

Not sure about that. No source code. Also, Pegasus.