Apple Regrets Confusion over 'iPhone Scanning'

Re:Apple Regrets Confusion over 'iPhone Scanning' by 29083011397778 on Friday August 13, 2021 @07:18PM (#28176042)

This actually enables Apple to apply end-to-end encryption, while still complying with US CSAM laws. Users' content is scanned for CSAM, and is encrypted before leaving their phone. Whether one considers E2E encryption worth it if the content is still scanned before being encrypted is an exercise left to the reader.

This potentially means all of iCloud, not just photos, could start to use E2E encryption as well - which is fantastic.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by yyyk on Friday August 13, 2021 @09:01PM (#28176773)

>This potentially means all of iCloud, not just photos, could start to use E2E encryption as well - which is fantastic.

They have to scan things that are not photos. What if the bad guys just zip their photos and upload that?

There also needs to be a solution to CSAM uploaded before NCMEC had a chance to tag it, especially to cases where the bad guys uploaded their CSAM and deleted it from their iPhone. What happens then, the bad guys get E2E and nobody can find them? There has to be a technical solution in mind for this, and everything I can think of has implications (Let the iPhone store hashes of deleted images? Would it be enough to scan also during download?)

IMHO, any serious attempt to find CSAM using Apple's client-side approach requires more scanning, and Apple not being forward on that makes me trust them less. Also, the moment they expand the scanning, we should think carefully if there actually are any privacy benefits.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by pseudalopex on Friday August 13, 2021 @07:47PM (#28176267)

Leaking information to Apple makes it not E2E.

What law do you think banned real E2E encryption?

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by dpkonofa on Friday August 13, 2021 @08:32PM (#28176593)

There's no leak of content. None of your content ever gets sent to Apple...ever.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by pseudalopex on Friday August 13, 2021 @08:43PM (#28176660)

"safety vouchers, which contain a visual derivative of the image, such as a low-resolution version"[1]

And I said information. The hash matching is information.

[1] https://www.apple.com/child-safety/pdf/Security_Threat_Model...

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by dpkonofa on Friday August 13, 2021 @08:52PM (#28176723)

You edited your response because I specifically used the word "content" because that's what you used...

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by pseudalopex on Friday August 13, 2021 @09:00PM (#28176765)

I did not. The person I replied to said content. Not me.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by monocasa on Friday August 13, 2021 @08:52PM (#28176724)

Which law specifically says that user data has to be scanned, breaking encryption if necessary? Everything I've seen says that they have to report what they find, but are under no obligation to actively look for it.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by strangeattractr on Friday August 13, 2021 @08:06PM (#28176407)

So if we submit to having all our content scanned by them they'll even give us E2EE on iCloud? I guess they really do care about our privacy.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by vimy on Friday August 13, 2021 @07:48PM (#28176279)

I don’t care about the cloud. I don’t want anyone scanning my device.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by PpEY4fu85hkQpn on Friday August 13, 2021 @08:45PM (#28176672)

Only photos that get sent to icloud are "scanned"

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by vimy on Friday August 13, 2021 @11:09PM (#28177488)

For now.

[ Parent | on HN ]

Re:Apple Regrets Confusion over 'iPhone Scanning' by PixyMisa on Friday August 13, 2021 @10:48PM (#28177389)

What law?

[ Parent | on HN ]