News for hackers. Stuff that matters.
Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @05:25PM (#28092919)
Apple will release this in their desktop pcs. The major consequence of this is that, a year down the line, microsoft will also be compelled/forced to join this "coalition of the good". After all, they already scan all your files for viruses, it would be a shame if they didn't scan for anything that is deemed incriminating and also call the cops on you. Of course, the children are being used as a trojan horse again. We don't even mention the giant logical leap from finding someone possessing CP to automatically considering them a child molester, yet someone posessing ~~an action~~ a murder video is not considered a murderer.

I m just imagining the situation where these companies took the initiative to scan all their users data in a situation like the attach in US capitol this year. Creating new affordances for spying always leads to their abuse in the first chance when an extreme circumstance occurs. So there is no excuse for creating those affordances just "because they can"

Re:Apple’s new abuse prevention system: an antritust/competi... by userbinator on Saturday August 07, 2021 @03:24AM (#28096526)
Of course, the next step after that is to make "non-authorised" operating systems -- which may include Linux (except for specially signed versions that will also include similar spyware) -- "deprecated" or "discouraged", then "suspicious", and perhaps even eventually illegal.

Stallman predicted a similar outcome, and although he (and many others) thought the end of computing freedom would be due to copyright/DRM, I wouldn't be surprised if "the children" is what eventually pushes things over the edge.

https://www.gnu.org/philosophy/right-to-read.en.html

in a situation like the attach in US capitol this year

...and as much as I'd like to see at least that amount of "watering the liberty tree" directed at Big Tech, it unfortunately would likely lead to even more authoritarian outcomes. Any future fights for freedom will need to happen online and non-violently, but on platforms that are also under their control.

Re:Apple’s new abuse prevention system: an antritust/competi... by mulmen on Saturday August 07, 2021 @09:06AM (#28098311)
> ...and as much as I'd like to see at least that amount of "watering the liberty tree" directed at Big Tech […]

I’m having a hard time finding a reading of this that isn’t advocating violence against tech workers. Is that what you intended?

Re:Apple’s new abuse prevention system: an antritust/competi... by wizzwizz4 on Saturday August 07, 2021 @10:11AM (#28098715)
Given corporate personhood, destroying the companies could be considered corporate murder. (I admit it's a very stretched reading.)
Re:Apple’s new abuse prevention system: an antritust/competi... by mulmen on Saturday August 07, 2021 @10:22AM (#28098785)
I agree that is a favorable reading.

But it is especially a stretch in the context of January 6th which involved violence directed at people. And the rest of the paragraph laments that future action must be nonviolent.

Re:Apple’s new abuse prevention system: an antritust/competi... by wizzwizz4 on Saturday August 07, 2021 @02:13PM (#28100636)
So, in fact, it's not advocating the violence.
Re:Apple’s new abuse prevention system: an antritust/competi... by mulmen on Saturday August 07, 2021 @02:38PM (#28100815)
It’s hard to say. Words like “I’d like” and “unfortunately” make me think it’s a desire for violence but an acknowledgement that it’s not worthwhile. Like I said, I’m trying to find the favorable reading. It seems hyperbolic at best.
Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Sunday August 08, 2021 @06:48AM (#28105762)
tech workers are replaceable. even if we assume violence was implied, it s better directed at their datacenters.

I did not find it very hard to assume a not-the-worst-possible reading of the comment. What's with the comment police here lately that's labeling various comments? I hope this ain't becoming the new twitter

Re:Apple’s new abuse prevention system: an antritust/competi... by mulmen on Monday August 09, 2021 @12:06PM (#28118583)
Are you aware of what “water the tree of liberty” references?

It is a Thomas Jefferson quote:

“The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants.”

In the context of January 6th it’s hard to make a leap to metaphorical server blood. Datacenters still have people inside them, no mention of servers was made. Only a quote from a man who waged a real war.

> tech workers are replaceable.

Speaking as a tech worker, no, my life is not replaceable.

> I did not find it very hard to assume a not-the-worst-possible reading of the comment.

The not-the-worst-possible reading being what? Mobs attacking data centers?

> What's with the comment police here lately that's labeling various comments? I hope this ain't becoming the new twitter

I feel the same way. So let's tone down the rhetoric. If this post was metaphorical hyperbole it is the kind that got a president impeached.

Re:Apple’s new abuse prevention system: an antritust/competi... by u10 on Friday August 06, 2021 @06:09PM (#28093337)
> possessing CP to automatically considering them a child molester, yet someone posessing an action movie is not considered a murderer

That's specious reasoning. Someone who posesses an action movie likes action movies, while someone who posesses child porn likes child porn. One is ok, the other is pretty vile and illegal for a reason.

I don't agree with Apple on this but let's be clear on what is and what isn't

Re:Apple’s new abuse prevention system: an antritust/competi... by flutas on Friday August 06, 2021 @07:19PM (#28093915)
> Someone who posesses an action movie likes action movies, while someone who posesses child porn likes child porn.

Unless it's planted. [0] Or sent to you. [1] Or (farther out there) happens to be embedded on a site you visited and ends up in your browser cache.

[0]: https://www.nytimes.com/2016/12/09/world/europe/vladimir-put...

[1]: https://www.nytimes.com/2019/06/17/nyregion/alex-jones-sandy...

Re:Apple’s new abuse prevention system: an antritust/competi... by gjsman-1000 on Friday August 06, 2021 @07:55PM (#28094206)
It only scans images in your iCloud Photo Library. Not paying for iCloud? No scanning. Not in your photo library? No scanning. And even then, only for known content, not new content.
Re:Apple’s new abuse prevention system: an antritust/competi... by flutas on Friday August 06, 2021 @08:59PM (#28094658)
Conveniently, iOS 15 also syncs images from your messages and many other places into your photos. Whether this will put that file in your iCloud Photo library, I do not know.

https://www.macrumors.com/how-to/see-photos-shared-with-you-...

On top of that, at this stage you are right. How long before they move it to every file in your device's storage "because of the children!"

Re:Apple’s new abuse prevention system: an antritust/competi... by runlevel1 on Friday August 06, 2021 @08:24PM (#28094410)
So the attacker only needs to get access to your iCloud. Your iPhone will happily sync down photos uploaded elsewhere.

You don't have to be paying for iCloud, either. There's a free tier, so I'd imagine almost all iPhones are using some tier of it.

iCloud account break-ins aren't exactly rare. An accusation, even if false, could ruin an innocent person's life.

Re:Apple’s new abuse prevention system: an antritust/competi... by nerdponx on Saturday August 07, 2021 @07:40AM (#28097807)
Not only is there a free tier, but the iPhone defaults are cleverly configured so that you quickly fill it up with random junk on your phone, and feel pressured into paying for more iCloud storage, because the default sync behavior is so non-obvious, and the settings to disable it are buried.

I know multiple people (most of them in their 50s or older) who started paying for iCloud because they thought it was their only option.

Re:Apple’s new abuse prevention system: an antritust/competi... by mercora on Saturday August 07, 2021 @02:23AM (#28096244)
> There's a free tier, so I'd imagine almost all iPhones are using some tier of it.

i was quite surprised to see this was the default or at least was setup unknowingly to me.

Re:Apple’s new abuse prevention system: an antritust/competi... by simondotau on Saturday August 07, 2021 @08:52AM (#28098233)
If this was going to happen, it would have already happened on Android, Gmail, OneDrive, or any of dozens of services which already do what Apple is now doing.

Or are you saying that malicious activity is only interesting if it was on an Apple device?

Re:Apple’s new abuse prevention system: an antritust/competi... by maximus-decimus on Saturday August 07, 2021 @11:44AM (#28099452)
You can have videos of somebody actually getting killed and it's not a crime. Reddit killed the /r/watchpeopledie subreddit, but it wasn't illegal to go on.

Until people are actively encouraging people dying for people getting killed by paying for gladiator matches, I agree with you it's not the same thing, but I don't think the person you're answering to is talking about action movies.

Re:Apple’s new abuse prevention system: an antritust/competi... by axiosgunnar on Sunday August 08, 2021 @09:35AM (#28106582)
> You can have videos of somebody actually getting killed and it's not a crime.

yet

Re:Apple’s new abuse prevention system: an antritust/competi... by birdyrooster on Saturday August 07, 2021 @10:45AM (#28098952)
You realize if this is as problematic as we are talking about and peoples lives are ruined from false positives it will create a political movement that will make this illegal. Stop trying to lobby companies and lobby for politicians that will rein this shit in.
Re:Apple’s new abuse prevention system: an antritust/competi... by Asmod4n on Friday August 06, 2021 @06:04PM (#28093288)
Microsoft already does this.

„Microsoft removes content that contains apparent CSEAI. As a US-based company, Microsoft reports all apparent CSEAI to the National Center for Missing and Exploited Children (NCMEC) via the CyberTipline, as required by US law. During the period of July – December 2020, Microsoft submitted 63,813 reports to NCMEC. We suspend the account(s) associated with the content we have reported to NCMEC for CSEAI or child sexual grooming violations.“

https://www.microsoft.com/en-us/corporate-responsibility/dig...

Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @06:57PM (#28093728)
I think that's for files uploaded to onedrive etc. Not for all the files on any windows pc
Re:Apple’s new abuse prevention system: an antritust/competi... by Asmod4n on Friday August 06, 2021 @07:30PM (#28094024)
The encouranged windows 10 setting is to sync your whole profile to OneDrive.
Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @08:41PM (#28094510)
Does this imply that apple was not checking the photos stored in their servers for CP? Then icloud must have been the best way to share it
Re:Apple’s new abuse prevention system: an antritust/competi... by Asmod4n on Friday August 06, 2021 @08:48PM (#28094564)
It at least looks like apple is the last one to do this. google, flickr, facebook, twitter etc did this since forever.
Re:Apple’s new abuse prevention system: an antritust/competi... by jachee on Friday August 06, 2021 @11:47PM (#28095513)
Almost like Apple was the last holdout to not give up customers’ privacy, and eventually had to cave. So they came up with a sophisticated system to handle the scanning on-device, and only for data that’s already destined for their servers.
Re:Apple’s new abuse prevention system: an antritust/competi... by slg on Friday August 06, 2021 @05:56PM (#28093228)
>We don't even mention the giant logical leap from finding someone possessing CP to automatically considering them a child molester, yet someone posessing an action movie is not considered a murderer.

This is a wild and in my opinion a wrongheaded analogy. Possessing CP is a crime by itself. It doesn't matter if the person possessing is actually a molester or not. It is just like the possession of drugs being illegal and it does not matter whether the person has actually taken or plans to take those drugs.

Re:Apple’s new abuse prevention system: an antritust/competi... by int_19h on Friday August 06, 2021 @11:04PM (#28095320)
The worst thing about it is that CP possession is a strict liability crime in most jurisdictions. Meaning that prosecution doesn't have to prove intent - if they can find it on your machine, you're guilty regardless of how it got there.
Re:Apple’s new abuse prevention system: an antritust/competi... by ostenning on Saturday August 07, 2021 @04:25AM (#28096894)
But for any serious charge you need indisputable evidence, and usually lots of it, usually the threshold is quite high.. But in the United States the system is insane so I could be wrong
Re:Apple’s new abuse prevention system: an antritust/competi... by himinlomax on Saturday August 07, 2021 @05:18AM (#28097129)
All the evidence required is that it is there.

Does not matter if someone else put it there without your knowledge. Or maybe it matters, but then it's on you (for all intents and purposes) to prove that it was without your knowledges.

Re:Apple’s new abuse prevention system: an antritust/competi... by alisonkisk on Saturday August 07, 2021 @08:55AM (#28098244)
The punishment for strict liability is much lower than for the same act with intent.
Re:Apple’s new abuse prevention system: an antritust/competi... by intricatedetail on Saturday August 07, 2021 @09:41AM (#28098514)
It's still essentially a death sentence if you are innocent.
Re:Apple’s new abuse prevention system: an antritust/competi... by anonuser123456 on Friday August 06, 2021 @11:45PM (#28095501)
In criminal law you must be aware of an item for it to be under your possession. If someone plants illegal content on your computer, and you are unaware, you aren't legally in possession.
Re:Apple’s new abuse prevention system: an antritust/competi... by int_19h on Saturday August 07, 2021 @12:58AM (#28095828)
"Typically in criminal law, the defendant's awareness of what he is doing would not negate a strict liability mens rea (for example, being in possession of drugs will typically result in criminal liability, regardless of whether the defendant knows that he is in possession of the drugs)."

https://www.law.cornell.edu/wex/strict_liability

Re:Apple’s new abuse prevention system: an antritust/competi... by anonuser123456 on Saturday August 07, 2021 @12:59PM (#28100062)
Note the word 'typically'.

The purpose of strict liability in possession is to prevent the defense that someone does not know the legal status of an item in their possession. It does NOT prevent the defense that someone does not _know_ something to be in their possession.

For example, it is not a defense to have drugs and claim "but I didn't know they were illegal". It is a defense to claim "I did not know they were there."

In drug cases with actual possession, it is difficult to support a defense of "I didn't know they were there", which is why charges typically result in criminal liability. They drugs were physically on you, and unless you have evidence that someone planted them, it is unlikely you could establish reasonable doubt.

But in cases of electronic material for networked devices, there is most certainly an affirmative defense to counter actual possession and constructive possession. Computer devices are hacked all the time, and network & device logs exist. For example, if a prosecutor agrees to the fact that a defendant had no knowledge of the material, a judge would toss the case and a jury would not convict you. The law is not meant to pedantically convict you of non-crimes.

Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @06:58PM (#28093741)
Yeah it wasn't meant to be an analogy. For example consider a real murder video, is its posession illegal and does it mean its owner should be a murder suspect?
Re:Apple’s new abuse prevention system: an antritust/competi... by slg on Friday August 06, 2021 @07:23PM (#28093947)
You are still falling into the same line of thinking here. The person isn't arrested because we assume they are a molester. They are arrested for possessing illegal material. Your argument here really sounds like you are suggesting that CP should be legal and it is the action of molesting that should be illegal. I don't think you would find many people who agree with that. Society has decided both are separate crimes and while there is likely large overlap, overlap is not required to be charged for either crime individually.
Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @07:28PM (#28094002)
> Society has decided both are separate crimes

Actually it's legislators and the courts that come up with these laws and they are complicated. The question is if these laws reduce child abuse or simply increase spying, and in the end what is the acceptable balance between these two.

Re:Apple’s new abuse prevention system: an antritust/competi... by slg on Friday August 06, 2021 @07:32PM (#28094033)
Legislators are a proxy for society. Do you believe that if you polled the US that any sizable portion of the country would be in support of legalizing CP?
Re:Apple’s new abuse prevention system: an antritust/competi... by matheusmoreira on Friday August 06, 2021 @09:43PM (#28094912)
If you polled the population, chances are they'd support torture, rape and execution as punishment for abusers.

The real crime is child abuse. Material related to that is also illegal because it presumably creates demand for the abuse. Whether that's actually true I don't know.

Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @07:39PM (#28094074)
In liberal democracies legislators also protect fundamental rights from the whims of the majority.

> if you polled the US that any sizable portion

No, but they also would agree to that they should have an option to keep their data privately. Maybe the public should be polled about this tradeoff?

For example the case of virtual CP has an interesting legal history https://www.freedomforuminstitute.org/first-amendment-center...

Re:Apple’s new abuse prevention system: an antritust/competi... by slg on Friday August 06, 2021 @07:44PM (#28094120)
>No, but they also wouldn't consent to having no option left to record their thoughts privately. Maybe the public should be polled about this tradeoff?

It is fine if this is your argument, but you don't have to wrap this argument in with the very legality of CP. You can acknowledge something is and should be a crime while also being against these type of automated dragnets to find people guilty of said crime.

Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @08:02PM (#28094262)
> something is and should be a crime while also being against these type of automated

But there is a clear tradeoff between the two so saying that would be a useless platitude. If we really see the internet as an extension of our vocal chords, then we should have individual rights to it, especially considering the fact that the internet infrastructure is not provided by the governments themselves, only the spying is.

Re:Apple’s new abuse prevention system: an antritust/competi... by slg on Friday August 06, 2021 @08:20PM (#28094380)
I don't know what to say to you if you consider someone voicing opposition to this move by Apple as a "useless platitude" if they don't also believe that we have a constitutional right to post CP on the internet.
Re:Apple’s new abuse prevention system: an antritust/competi... by rossmohax on Friday August 06, 2021 @05:51PM (#28093181)
> yet someone posessing an action movie is not considered a murderer.

I think it is more similar to drugs, possesing one doesn't mean you are consuming it, yet it is an illegal substance and production, transportation and distribution are understandably not allowed.

Re:Apple’s new abuse prevention system: an antritust/competi... by heavyset_go on Friday August 06, 2021 @08:09PM (#28094297)
Good point. There are over 80,000 drug overdose deaths a year in the US, if these systems can detect nudity and CSAM, then why not save tens of thousands of lives by detecting heroin and fentanyl dealers, too?
[dead]
Re:Apple’s new abuse prevention system: an antritust/competi... by hughrr on Friday August 06, 2021 @06:19PM (#28093419)
That's a stupid assumption to make based on that. If someone emails or messages you a picture then you're in possession of it if you chose to be or not.
Re:Apple’s new abuse prevention system: an antritust/competi... by Mike8435 on Friday August 06, 2021 @06:27PM (#28093504)
No it was not a stupid assumption. You need to read more carefully as I exposed a flaw in his reasoning. The suggestion was that since CP possession does not prove physical molestation, therefore it is OK. Actually possession of CP is a crime in itself. This is an objective fact. I've known of otherwise intelligent people who do believe its actually OK to possess child porn if they're not physically molesting anyone.
Re:Apple’s new abuse prevention system: an antritust/competi... by cblconfederate on Friday August 06, 2021 @06:50PM (#28093667)
Of course it is not OK. Does making it illegal and violating everyone's privacy rights reduce child abuse? I'd like to see the evidence. Another example is virtual child pornography which , evil as it is, does not harm anyone during its production, yet that is also illegal (in the US). The question is how far will governments go with the instrumentalization of child abuse prevention in order to spy on their own citizens
Re:Apple’s new abuse prevention system: an antritust/competi... by PhasmaFelis on Friday August 06, 2021 @07:08PM (#28093828)
> We don't even mention the giant logical leap from finding someone possessing CP to automatically considering them a child molester, yet someone posessing an action movie is not considered a murderer.

Filming an action movie does not require actually murdering people.

Re:Apple’s new abuse prevention system: an antritust/competi... by jeltz on Saturday August 07, 2021 @06:40AM (#28097521)
And neither does producing child porn. Drawn child porn is banned in most countries.
Re:Apple’s new abuse prevention system: an antritust/competi... by PhasmaFelis on Saturday August 07, 2021 @12:24PM (#28099781)
And that's silly. But I'm talking about actual child porn.

I'm not defending Apple. I'm saying it's absurd to act like "merely" distributing explicit photos taken without the subject's consent is a victimless crime.

Re:Apple’s new abuse prevention system: an antritust/competi... by anonuser123456 on Friday August 06, 2021 @11:32PM (#28095446)
>We don't even mention the giant logical leap from finding someone possessing CP to automatically considering them a child molester, yet someone posessing ~~an action~~ a murder video is not considered a murderer.

That is because the consumption of child porn induces people to create it. The consumption of action movies does not induce people to murder anyone.

Re:Apple’s new abuse prevention system: an antritust/competi... by hakfoo on Sunday August 08, 2021 @11:57PM (#28112613)
I'm curious to what extent the demand for new child porn content is directly driven by its illegal nature.

Some proportion of existing content has been discovered, tagged, and hashed. The legally and technically savvy members of the audience would likely know this. In such an environment, "old standard" content would be seen as riskier to hold or exchange. A completely fresh, new abuse image is the least likely to trip any automated monitoring system.

I could also easily see warez-ratio style "you've got to share something new to get access to our content" patterns, to try to discourage law-enforcement infiltration of their groups and to ensure "if I go down, I take you with me" legal leverage.

Re:Apple’s new abuse prevention system: an antritust/competi... by aj3 on Saturday August 07, 2021 @03:55AM (#28096724)
[citation needed]
Re:Apple’s new abuse prevention system: an antritust/competi... by beebmam on Friday August 06, 2021 @05:29PM (#28092973)
Windows has been doing this for years. Not with this new tech, but with older methods.
Re:Apple’s new abuse prevention system: an antritust/competi... by TrevorJ on Friday August 06, 2021 @05:38PM (#28093053)
I'm skeptical of the claim that MS has been A: scanning files on local windows machines and B: forwarding anything concerning to law enforcement. That's a fairly extraordinary claim, and I would like to see the evidence.
Re:Apple’s new abuse prevention system: an antritust/competi... by ribosometronome on Friday August 06, 2021 @06:08PM (#28093326)
Microsoft hasn't been scanning files on local machines but Microsoft has been doing essentially the same thing Apple has been for years -- they pioneered it with PhotoDNA back in 2009. It's been in use with OneDrive since back when it was called SkyDrive (https://www.makeuseof.com/tag/unfortunate-truths-about-child...). Apple's implementation is scanning images 1) stored on iCloud or 2) in Messages if parents turn it on.

The first seems pretty arbitrary -- why is it worse to scan files you're sharing with the cloud locally than in the cloud (except potential performance/battery impact, but that seems moot).

If Apple brings this feature to the desktop, it seems likely they'd be using it the same way: files stored in their cloud.

Re:Apple’s new abuse prevention system: an antritust/competi... by Grazester on Friday August 06, 2021 @08:16PM (#28094354)
Ok but this is not Windows, Which the op stated
Re:Apple’s new abuse prevention system: an antritust/competi... by Grazester on Friday August 06, 2021 @05:41PM (#28093075)
What are you talking about?