News for hackers. Stuff that matters.
Re:Hash collision in Apple NeuralHash model by Edd314159 on Wednesday August 18, 2021 @08:56AM (#28220399)
> A devastating scenario for such a system is if an attacker knows how to look at a hash and generate some image that matches the hash, allowing them to trigger false positives any time.

This is my understanding too. But is this not also true for other (cloud-based) CSAM scanning systems? Why is Apple's special in this regard?

Re:Hash collision in Apple NeuralHash model by nonbirithm on Wednesday August 18, 2021 @12:14PM (#28223365)
They aren't.

Apple could have saved themselves so much backlash and not have caused the outrage to be focused exclusively on them if they hadn't tried to be novel with their method of hashing, and had just announced that they were about to do exactly what all the other tech companies had already been doing for years - server side scanning.

Apple would still be accused of walking back on its claims of protecting users' privacy, but for a different reason - by trying to conform. Instead of wasting all the debate on how Apple and only Apple is violating everyone's privacy with its on-device scanning mechanism, which was without precedent, this could have been an educational experience for many people about how little privacy is valued in the cloud in general, no matter who you choose to give your data to, because there is precedent for such privacy violations that take place on the server.

Apple could have been just one of the companies in a long line of others whose data management policies would have received significant renewed attention as a result of this. Instead, everyone is focused on criticizing Apple.

There is a significant problem with people's perception of "privacy" in tech if merely moving the scan on-device causes this much backlash while those same people stayed silent during the times that Google and Facebook and the rest adopted the very same technique on the server in the past decade. Maybe if Apple had done the same, they would have been able to get away with it.

Re:Hash collision in Apple NeuralHash model by cyanite on Wednesday August 18, 2021 @04:20PM (#28226555)
Perception aside, Apple’s system is somewhat better for privacy, since Apple needs to access much less data server side.
Re:Hash collision in Apple NeuralHash model by floatingatoll on Wednesday August 18, 2021 @10:35AM (#28221514)
There’s a lot of overlap between Apple product buyers and “fight the thoughtcrime slippery slope” hackers. The CSAM abusers are presumably (if they’re not stupid) also fanning the flames on that slippery slope perception, because it’s to their benefit if the hackers defeat Apple.
Re:Hash collision in Apple NeuralHash model by bo1024 on Wednesday August 18, 2021 @10:48AM (#28221737)
I don't know. I don't know what other systems use, I just know what I've read recently about Apple's.
Re:Hash collision in Apple NeuralHash model by cyanite on Wednesday August 18, 2021 @04:20PM (#28226564)
This pretty much sums this entire drama up, I think.