News for hackers. Stuff that matters.

A comment on Apple enabling client-side CSAM scanning on iPhone tomorrow. Parent comment

Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by kop316 on Thursday August 05, 2021 @12:41PM (#28076143)
> The software is not anywhere near audited

Many of the projects leverage a well known OS as their base (e.g. pmOS uses Alpine Linux, Mobian uses Debian), and actively ensure that anything that can be upstreamed is upstreamed. So it's not like you're downloading some random ROM off of XDA.

[ Parent | on HN ]
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by zepto on Thursday August 05, 2021 @01:22PM (#28076746)
That doesn’t make the system audited. The obvious reason we don’t hear more about the weaknesses is that no high value targets are using these systems, so it’s not worth exploiting them.
[ Parent | on HN ]
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by m4rtink on Thursday August 05, 2021 @05:21PM (#28080032)
Um, these distros are normally used to run like half the Internet, they are very valuable targets today and I don't think putting them on a phone changes the threat environment so much.
[ Parent | on HN ]
Re:Apple enabling client-side CSAM scanning on iPhone tomorrow by zepto on Thursday August 05, 2021 @05:50PM (#28080422)
The threat environment is utterly different between an individual person’s phone and an anonymous server behind a firewall on the internet.

It’s not even close.

[ Parent | on HN ]