News for hackers. Stuff that matters.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by eecc on Thursday August 05, 2021 @07:19AM (#28072193)
So, it’s not that other platforms are any better!

Are you sure intel, AMD, Arm or windows TPM aren’t snitching on you? Do we need to make our own silicon from ingot?

There’s no technological solution to this problem, only social and legislative.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by GeekyBear on Thursday August 05, 2021 @07:55AM (#28072438)
Have people already forgotten that Microsoft implemented the tech to routinely scan your cloud storage a decade ago?

>The system that scans cloud drives for illegal images was created by Microsoft and Dartmouth College and donated to NCMEC. The organization creates signatures of the worst known images of child pornography, approximately 16,000 files at present. These file signatures are given to service providers who then try to match them to user files in order to prevent further distribution of the images themselves, a Microsoft spokesperson told NBC News. (Microsoft implemented image-matching technology in its own services, such as Bing and SkyDrive.)

https://www.nbcnews.com/technolog/your-cloud-drive-really-pr...

Didn't the Windows 10 TOS extend that scanning to local storage as well?

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by neycoda on Thursday August 05, 2021 @08:46AM (#28072914)
I'm OK with software generating signatures from cloud drive images to eliminate child porn pictures and catch pedophiles.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by raxxorrax on Thursday August 05, 2021 @10:15AM (#28074018)
Have you ever had the impression that special interests are much more interested in copyright violations than child pornography? Or that it might extend to memes that sabotages carefully crafted propaganda? I do have that impression a lot.

I don't step in the lowest parts of the internet hell, but I am also not very picky about it. I have never encountered child pornography in 10 years of almost pathological internet usage.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by GeekyBear on Thursday August 05, 2021 @10:18AM (#28074061)
Scanning for DRM violations was one of the use cases mentioned in the article linked above.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by raxxorrax on Thursday August 05, 2021 @11:04AM (#28074725)
I didn't know what CSAM stood for so I first though this would be the reaction to the security issues iPhones faced. Oh, silly me.

Additionally, by calculating hashes of media on peoples devices, you can quickly determine networks. A private image you shared with your friends? Unique hash and everyone that has it is probably in your network. That is aside from the issue that they would also just read your contacts.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by AlexandrB on Thursday August 05, 2021 @08:56AM (#28073039)
You should read the rest of the linked Twitter thread, because the issue is that if the hash algorithm has a collision vulnerability, any image could be manipulated to show up as "child porn" to the scanner.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by shuckles on Thursday August 05, 2021 @11:11AM (#28074860)
Microsoft created and hosts the PhotoDNA service which all providers use, and PhotoDNA has false positives. All reports are supposed to be manually reviewed before being sent to Cyber Tip.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by suizi on Thursday August 05, 2021 @06:32PM (#28080921)
But, are they? The Swiss federal police weren't too happy about the reports they received from the Cyber Tip.
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by gruez on Thursday August 05, 2021 @08:48AM (#28072943)
>windows TPM aren’t snitching on you?

The TPM FUD has really gone out of hand.

1. there's no such thing as "windows TPMs", whatever that means.

2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by warkdarrior on Thursday August 05, 2021 @01:36PM (#28076956)
> 2. TPMs basically has zero access to the rest of the system. It's connected via a LPC bus, so there's no fancy DMA attacks to pull off. Over that bus the system firmware sends various hashes of the system state (eg. hash of your bootloader), but that's about it.

That's the specification. Have you actually monitored the bus using probes? Did you check that the TPM is only connected to LPC?

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by gruez on Thursday August 05, 2021 @02:03PM (#28077300)
>Have you actually monitored the bus using probes

Isn't this the definition of FUD?

>Did you check that the TPM is only connected to LPC?

Dunno, you tell me. https://en.wikipedia.org/wiki/File:TPM_Asus.jpg

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by xattt on Thursday August 05, 2021 @07:36AM (#28072306)
Is this the real reason why there is the Windows 11 x64 silicon cut-off?
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by fsflover on Thursday August 05, 2021 @07:21AM (#28072208)