News for hackers. Stuff that matters.
Re:Apple’s Mistake by benhurmarcel on Monday August 09, 2021 @03:53PM (#28121575)
There’s not much you can do about it if you want a decent smartphone. On Android Google also can do on-device scanning since forever.
Re:Apple’s Mistake by kuratkull on Monday August 09, 2021 @04:20PM (#28121863)
The problem is _not_ on-device scanning, it's on-device scanning and then sending incriminating results to the device maker.
Re:Apple’s Mistake by nicce on Monday August 09, 2021 @06:06PM (#28122908)
Final result is better than before, because scanning applies only into targets which are ending into the cloud. Content was plaintext in the cloud before (not counting server-side encryption).

With current change, they have "partial" E2E encryption and Apple can decrypt them only if CSAM treshold is reached. If we leave all speculation, this is a great improvement for privacy in CSAM context.

You can opt-out from scanning by not using iCloud.

Re:Apple’s Mistake by LMYahooTFY on Tuesday August 10, 2021 @02:43AM (#28125771)
On Android they can do this?

Source?

The distinction still needs to be made between AOSP and whatever ships on your phone or is included in play services. Especially on HN of all places.

Re:Apple’s Mistake by benhurmarcel on Tuesday August 10, 2021 @08:52AM (#28128194)
Fair enough, but Android includes Play Services in all notable cases. Yes a handful of people run it without, which does solve that issue, at the cost of convenience and usability.

That's why I specified "decent smartphone". I wouldn't consider the UX of Android without Play Services to be "decent".