Re:Apple Regrets Confusion over 'iPhone Scanning'
by Terretta on Saturday August 14, 2021 @04:07PM
(#28183579)
> No, architecturally there's no reason to do it on the client side.
The architectural reason is to do things the server couldn’t.
> You're uploading a photo to iCloud, encrypted with a key that Apple controls.
The architectural reason is so the server doesn’t have to be able to read the photo, and it need not be a key Apple controls.
Your first two sentences are the exact reason to do it on the client instead of on the server, such that it’s possible to have e2e encryption opaque to the server.
Re:Apple Regrets Confusion over 'iPhone Scanning'
by lordlic on Friday August 20, 2021 @04:28AM
(#28243892)
But it's not e2e encrypted so I don't know what point you think you're making here.
Re:Apple Regrets Confusion over 'iPhone Scanning'
by LexGray on Friday August 13, 2021 @10:00PM
(#28177123)
Apple gets hung up on weird stuff. Likely doing work phone side was an environmental argument. The amount of energy used to decrypt server side to create the hash was marginally larger than the amount used by the phone pre-encryption with cost of transmitting. (Bonus that the energy and CPU was paid for by the client). The result for either location is identical.
It's basically engineering with the goal of creating a perception of privacy rather than actual privacy. I don't really care that much about Apple policing what you upload to iCloud, but this disingenuous architecture does annoy me a bit, and there's also the added insult of having a device in your pocket that by design works against its owner (reminiscent of "treacherous computing"). These problems would go away if they just did the check on the server side.