Apple’s new abuse prevention system: an antritust/competition point of view

Re:Apple’s new abuse prevention system: an antritust/competi... by throwayws on Friday August 06, 2021 @05:50PM (#28093168)

Planting false evidence is getting a new twist here. The attacker doesn't even have to make a report! The victim's computer does it for him. Disk encryption malware may have new successor. Effective and scalable extortion as a service.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by Kaytaro on Friday August 06, 2021 @06:08PM (#28093329)

This is a great point. You don't even need to unlock an iPhone to take a picture. So in theory anyone with access to your phone for a few seconds could incriminate you with little effort.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by selsta on Friday August 06, 2021 @06:55PM (#28093708)

This is already possible today with things like iCloud Photos, Google Photos, OneDrive etc.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by mobiledev2014 on Friday August 06, 2021 @10:46PM (#28095240)

Today: "WTF is this?" delete

iOS 15: "WTF is this?" SWAT team crashes through window

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by fossuser on Friday August 06, 2021 @07:59PM (#28094245)

This is not true. The check is only against known CSAM hashes.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by noisem4ker on Friday August 06, 2021 @08:32PM (#28094451)

Just photograph a known bad picture.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by fossuser on Friday August 06, 2021 @08:35PM (#28094471)

Then that's a different photo and will have a different hash.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by Simucal on Friday August 06, 2021 @08:46PM (#28094547)

These aren’t cryptographic hashes. They are perceptual hashes and a picture of a picture could absolutely end up with the same phash value.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by skavi on Friday August 06, 2021 @08:48PM (#28094561)

is there really no fuzziness to it? If not, can’t this be defeated by simply reencoding the image?

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by fossuser on Friday August 06, 2021 @08:55PM (#28094628)

I think it has gotten more sophisticated to detect cropped images and small changes now: https://inhope.org/EN/articles/what-is-image-hashing

The example is somewhat contrived.

If a 'friend' takes your phone and has access to it and then uses it to take images of CSAM similar enough to the original image that it triggers the hash match and does this enough times to go over Apple's threshold to flag the account after these images are uploaded to icloud without the original phone owner noticing then yes it might cause a match.

At that point the match is probably a good thing (and not really a false positive anyway) - since it may lead back to the friend (that has the illegal material).

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by zbobet2012 on Saturday August 07, 2021 @01:02AM (#28095848)

Or you know, anyone who wants to plant material on a device and has physical access. Say a disgruntled employee before leaving, or ex, or criminal or...

Or anyone who can just text you since imessage backs up to icloud automatically...

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by jeromegv on Saturday August 07, 2021 @10:02AM (#28098654)

While iMessage backups to iCloud, this measure is only for photos stored in the iCloud Photo Library. So sending a text with the photo is not enough.

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by antpol on Friday August 06, 2021 @09:57PM (#28094987)

Are you sure the hash function literally called "NeuralMatch" running on the device with 2+ gen of AI capable chips won't have "collisions"?

[ Parent | on HN ]

Re:Apple’s new abuse prevention system: an antritust/competi... by archagon on Friday August 06, 2021 @08:34PM (#28094460)

Picture of a picture?

[ Parent | on HN ]