News for hackers. Stuff that matters.
Re:Hash collision in Apple NeuralHash model by hughrr on Wednesday August 18, 2021 @06:18AM (#28219386)
That assumes that the human review process is competent, your own images aren’t poisoned in some way (consider your own kids in the bath with some noise added) etc.

In the mean time they lock your account which means your entire digital life stops dead until their review process is done.

No way do I accept any of this.

Also the hashes are on the device I understand and it’s not going to be that difficult to extract them.

Re:Hash collision in Apple NeuralHash model by FabHK on Wednesday August 18, 2021 @06:27AM (#28219449)
You:

> the hashes are on the device I understand and it’s not going to be that difficult to extract them.

----

A Review of the Cryptography Behind the Apple PSI System, Benny Pinkas, Dept. of Computer Science, Bar-Ilan University:

> Do users learn the CSAM database? No user receives any CSAM photo, not even in encrypted form. Users receive a data structure of blinded fingerprints of photos in the CSAM database. Users cannot recover these fingerprints and therefore cannot use them to identify which photos are in the CSAM database.

https://www.apple.com/child-safety/pdf/Technical_Assessment_...

----

The Apple PSI Protocol, Mihir Bellare, Department of Computer Science and Engineering University of California, San Diego:

> users do not learn the contents of the CSAM database.

https://www.apple.com/child-safety/pdf/Technical_Assessment_...

----

A Concrete-Security Analysis of the Apple PSI Protocol, Mihir Bellare, Department of Computer Science and Engineering University of California, San Diego:

> the database of CSAM photos should not be made public or become known to the user. Apple has found a way to detect and report CSAM offenders while respecting these privacy constraints.

https://www.apple.com/child-safety/pdf/Alternative_Security_...

Re:Hash collision in Apple NeuralHash model by hughrr on Wednesday August 18, 2021 @06:42AM (#28219527)
So fundamentally there’s a lot of mechanism around keeping secrets but the source material is available. Hmm.

https://youtu.be/eU2Or5rCN_Y

Re:Hash collision in Apple NeuralHash model by user-the-name on Wednesday August 18, 2021 @06:21AM (#28219410)
The human reviewer would be able to check against the exact image that generated the hash in the first place. Taking another completely unrelated image and perturbing it would be immediately obvious.
Re:Hash collision in Apple NeuralHash model by hughrr on Wednesday August 18, 2021 @06:22AM (#28219417)
So there’s an office somewhere with computers full of illegal child porn that people are staring at and comparing your photos to?

There’s some irony in that.

Re:Hash collision in Apple NeuralHash model by henrikeh on Wednesday August 18, 2021 @06:30AM (#28219464)
Yes. That is called NCMEC in the US and it is a core aspect of how this whole process works.

If you don’t understand the details of this, I’ll recommend this podcast episode which sums it up and discusses the implications https://atp.fm/443

Re:Hash collision in Apple NeuralHash model by hughrr on Wednesday August 18, 2021 @06:39AM (#28219504)
I am aware of the details. The episode of Brass Eye comes into context here, the relevant clip being as follows, showing exactly the issues of competence.

https://youtu.be/_U-7L1tmBAo

Re:Hash collision in Apple NeuralHash model by et2o on Wednesday August 18, 2021 @07:16AM (#28219720)
I don’t have much of an opinion here except that it is silly to write “I am aware of the details” when someone gives you a helpful explanation and you are obviously not aware of the details, as you had just asked a question betraying.
Re:Hash collision in Apple NeuralHash model by henrikeh on Wednesday August 18, 2021 @06:49AM (#28219564)
I’m sorry, what is your point? I legitimately don’t understand what you mean.
Re:Hash collision in Apple NeuralHash model by nyuszika7h on Wednesday August 18, 2021 @06:46AM (#28219553)
> In the mean time they lock your account which means your entire digital life stops dead until their review process is done.

Do you have a source for this, or are you just making things up?