Re:Convert Apple NeuralHash model for CSAM Detection to ONNX
by xucheng on Wednesday August 18, 2021 @05:35AM
(#28219166)
You can technically hide an adversarial collision inside a complete legit normal image. It won’t be seen by human eyes but it will trigger a detection. In addition, you can do the complete opposite by perturbing a CSAM to output complete different hash to circumvent the detection. All of these vulnerabilities are well known for perceptual hash.
[ Parent
| on HN ]
Re:Convert Apple NeuralHash model for CSAM Detection to ONNX
by SV_BubbleTime on Wednesday August 18, 2021 @07:43PM
(#28228637)
So right there seems to be an issue to me. It seems like if you were trading in CSAM, you would run CLEANER -all on anything and everything. Because you know someone has already written that as proof of concept here.