News for hackers. Stuff that matters.
Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:25PM (#28226622)
Am I the only one who finds no issue with this? Personally I’d prefer this than no encryption and scanning in the cloud, which is already possible.

All of the slippery slope arguments have already been possible for nearly a decade now with the cloud.

Can someone illustrate something wrong with this that’s not already possible today.

Fundamentally unless you audited the client and the server yourself either (client or backend) scanning is possible, and therefore this “problem”.

Where’s the issue?

Re:Apple defends anti-child abuse imagery tech after claims ... by fritzw on Wednesday August 18, 2021 @05:24PM (#28227381)
> All of the slippery slope arguments have already been possible for nearly a decade now with the cloud.

That doesn't make it ok. The fact that you and my mom have normalized bad behavior doesn't make it any less offensive to my civil liberties.

> Am I the only one who finds no issue with this?

If you only think about the first order effects. This is great, we catch a bunch of kid sex pedos. The second order effects are much more dire. "slippery slope" sure... but false arrests, lives ruined based on mere investigations revealing nothing, expanding the role of government peering in to our personal lives, resulting suicides, corporations launching these programs - then defending them - then expanding them due to government pressure is *guaranteed*, additional PR and propaganda from corporations and government for further invasion in our personal lives due to the marketed/claimed success of these programs. The FBI has been putting massive pressure on Apple for years, due to the dominance and security measures of iOS.

Say what you want about the death penalty, but many many innocent people have dead in a truly horrific way, with some actually being tortured while being executed. That is a perfect example of second order effects on something most of us without any further information (ending murderous villains is a good thing) would agree on. So many Death Row inmates have been exonerated and vindicated.

edit: https://en.wikipedia.org/wiki/List_of_exonerated_death_row_i...

Re:Apple defends anti-child abuse imagery tech after claims ... by xadhominemx on Wednesday August 18, 2021 @04:45PM (#28226871)
> All of the slippery slope arguments have already been possible for nearly a decade now with the cloud.

Not only has it been possible for a decade, it’s been happening for a decade. Every major social media company already scans for and reports child pornography to the feds. Facebook submits millions of reports per year.

Re:Apple defends anti-child abuse imagery tech after claims ... by headShrinker on Thursday August 19, 2021 @06:08AM (#28232118)
I really don’t understand how you can, with sound mind, compare a public facing ‘social media’ with my very personal and very private phone photos. These are two completely different things.
Re:Apple defends anti-child abuse imagery tech after claims ... by xadhominemx on Thursday August 19, 2021 @12:40PM (#28236027)
They are not scanning photos stored on your phone, their are scanning photos stored on iCloud
Re:Apple defends anti-child abuse imagery tech after claims ... by headShrinker on Thursday August 19, 2021 @09:12PM (#28241291)
My iCloud is not accessible to all my friends, family, work associates, and the public. Facebook/Twitter/insta is. (Depending on your privacy settings)

Scanning publicly accessible material makes a lot of sense and is within the boundaries of section 230, tech companies are responsible for policing removing illegal or threatening material. For private or encrypted information, section 230 does not apply.

The purposes these services were designed for matters. iCloud is meant to be private, facebook would prefer everything you post is public as it’s built in to benefit their business model. Facebook should scan, iCloud shouldn’t. You are purposely obfuscating that detail.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:53PM (#28226994)
Yes, exactly. This is honestly nothing new.
Re:Apple defends anti-child abuse imagery tech after claims ... by mrkstu on Wednesday August 18, 2021 @05:06PM (#28227155)
This is new for Apple's customers. And its new in that the device you bought and paid for is nosing through your files.

Apple is introducing a reverse 'Little Snitch' where instead of the app warning you what apps are doing on the network, the OS is scanning your photos. Introducing a 5th columnist into a device that you've bought and paid for is a huge philosophical jump from Apple's previous stances on privacy, where they'd gone as far as fighting the Feds about trying to break into terrorist's iPhones.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @05:15PM (#28227271)
Luckily for their customers it can be turned off. So, what’s the issue?
Re:Apple defends anti-child abuse imagery tech after claims ... by mrkstu on Wednesday August 18, 2021 @05:34PM (#28227467)
A huge part of Apple’s value proposition is iCloud. If I have to turn that off to keep the spy out of my OS, it’s value to me is dramatically diminished.
Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @05:36PM (#28227495)
Since you presumably don’t trust Apple to scan your photos, it sounds like Apple might not be for you, then. Who will you move to?
Re:Apple defends anti-child abuse imagery tech after claims ... by vorpalhex on Wednesday August 18, 2021 @10:35PM (#28229715)
Motte and Bailey much?

"Well you can turn it off" to "Well, but then you just don't trust Apple".

Clearly these are users who did trust Apple. Apple betrayed their trust. Given that Apple bulk handed over iCloud data to China, I don't really believe their pinky promise that they are, by policy only, going to resist government use of this tech. They can cave to government cases _and_ the government can certainly force them to.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @11:24PM (#28230008)
The point is that turning it off resolves the issue, but if someone refuses to turn it off because they want to use iCloud there’s clearly a contradiction.

Therefore you must trust Apple. So if you still have issues then you don’t trust Apple.

Re:Apple defends anti-child abuse imagery tech after claims ... by mrkstu on Wednesday August 18, 2021 @06:03PM (#28227725)
In the past I trusted Apple to resist government efforts to spy on me to the best the law allowed. Now they are innovating ways to help a government spy literally live in my pocket.

Trust is fragile and Apple has taken what in the past I believed it understood to be a strategic advantage and stomped it into little pieces.

Re:Apple defends anti-child abuse imagery tech after claims ... by creddit on Wednesday August 18, 2021 @04:49PM (#28226928)
Why prefer your owned device tattling on you to Apple looking at data you give them on their servers?

The reason people don't like this, as opposed to, for example, Dropbox scanning your synced files on their servers, is that a compute tool you ostensibly own is now turned completely against you. Today, that is for CSAM, tomorrow, what else?

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:52PM (#28226977)
There’s no difference - all cloud services that aren’t encrypting your data is subject to the same thing. Dropbox could do the same thing tomorrow. If we’re talking about hypotheticals any vendor that handles your unencrypted files can do this now.
Re:Apple defends anti-child abuse imagery tech after claims ... by creddit on Wednesday August 18, 2021 @05:28PM (#28227418)
You’re not understanding. Dropbox already does scan your files and I’m comparing Apples actions explicitly to that fact. I’m pointing out that people don’t care about that because you’re literally, voluntarily, giving Dropbox your files. Here, Apple is controlling your phone to tattle on you at an OS level (yes, I know, Apple says you need to turn on iCloud Photos for this to run but the precedent is the problem).
Re:Apple defends anti-child abuse imagery tech after claims ... by headShrinker on Thursday August 19, 2021 @06:24AM (#28232185)
> Dropbox already does scan your files

> people don’t care about that because you’re literally, voluntarily, giving Dropbox your files.

Correct and I agree. I don’t upload my most personal photos to Dropbox for this very specific reason. In fact I stopped using Dropbox when Condi Rice joined the board because she lacks good sense and doesn’t respect civil rights. See ‘The Patriot Act’ and ‘the Invasion of Afghanistan’. It was easy to stop using Dropbox because the alternatives were vast. Apple has me very purposely locked in to this scheme to where the alternatives are a huge transition and compromise on privacy no matter where I turn.

Re:Apple defends anti-child abuse imagery tech after claims ... by stevenalowe on Wednesday August 18, 2021 @05:16PM (#28227283)
big difference: you're now paying for the compute load, instead of the cloud providers, for something that offers no direct benefit to you and will most likely betray you in unforeseen ways in the future (especially in less 'free' countries)
Re:Apple defends anti-child abuse imagery tech after claims ... by mavhc on Wednesday August 18, 2021 @05:19PM (#28227324)
Why did you think you owned a closed source device?
Re:Apple defends anti-child abuse imagery tech after claims ... by creddit on Wednesday August 18, 2021 @05:36PM (#28227492)
Open Source fanatics are the worst. Even if all the software on your phone was Open Source, you wouldn’t have the mental bandwidth to ever verify you trust it. You’re just farming out your trust to a different set of people and hoping they’re more trustworthy than those with closed source. At best this MAY be reasonable because of incentive alignment but that’s super weak.

Not to mention the meaning of ownership is completely unrelated to ability to view the designs of a given object. I think I own the fan currently blowing air at me without ever having seen a schematic for its controls circuitry just fine and everyone for all of history has pretty much felt the same.

Re:Apple defends anti-child abuse imagery tech after claims ... by mavhc on Wednesday August 18, 2021 @05:50PM (#28227630)
That's because your fan is hardware and your phone is software. The hardware in your phone is only 1% of what your phone is.

The point is it's hard to hide your evil plans in daylight. Either you trust Apple or your don't. Same with Microsoft's telemetry, they wrote the whole OS, if they were evil they have 10000 easier ways to do it.

All Apple has to do is lie, you'll never know.

Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @04:39PM (#28226801)
Personally, I'd prefer no privacy intrusions at all.

The issue is that Apple previously was not intruding into their user's privacy (at least publicly), but now they are.

It sounds like your argument is that Apple could have been doing this all along and just not telling us. I find that unlikely mainly because they've marketed themselves as a privacy-focused company up until now.

Re:Apple defends anti-child abuse imagery tech after claims ... by shapefrog on Wednesday August 18, 2021 @05:20PM (#28227327)
> The issue is that Apple previously was not intruding into their user's privacy

Apple reserves the right at all times to determine whether Content is appropriate and in compliance with this Agreement, and may screen, move, refuse, modify and/or remove Content at any time, without prior notice and in its sole discretion, if such Content is found to be in violation of this Agreement or is otherwise objectionable.

You must not have been paying attention for the last 20 years.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:42PM (#28226831)
I’m your situation can’t you just turn off the scanning? What’s the issue?
Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @04:50PM (#28226950)
There are two different "features" being implemented - Messages scanning for minors on a family plan (which can be turned off) and iCloud Photo scanning (which can't be turned off, as far as I know). So no, you can't just turn it off.
Re:Apple defends anti-child abuse imagery tech after claims ... by CubsFan1060 on Wednesday August 18, 2021 @04:57PM (#28227047)
Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @05:02PM (#28227105)
Only if you disable iCloud photos completely. So no, you cannot turn off the feature unless you stop using iCloud photos.
Re:Apple defends anti-child abuse imagery tech after claims ... by CubsFan1060 on Wednesday August 18, 2021 @05:06PM (#28227154)
Correct. I'm not sure how that's a distinction from "you can't turn it off" though. I believe they've been doing this scan server-side for quite some time already.
Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @05:22PM (#28227347)
Here's the distinction: I used to be able to use iCloud photos without having my photos scanned, and now I can't. So I have to make a choice of either dropping iCloud photos completely or submit to having all of my photos scanned.

I don't think they have been doing server-side scanning until now, hence the publicity. Do you have any evidence that shows they've been doing this before?

Re:Apple defends anti-child abuse imagery tech after claims ... by CubsFan1060 on Wednesday August 18, 2021 @05:41PM (#28227538)
Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @06:31PM (#28227975)
The article you linked makes a surprising claim, and it contradicts what the EFF said recently about this here - https://www.eff.org/deeplinks/2021/08/apples-plan-think-diff...

> Currently, although Apple holds the keys to view Photos stored in iCloud Photos, it does not scan these images

It also seems weird that the EFF wouldn't have complained about this before if Apple was known to be doing server-side scanning for some time now.

I also am not going to watch through an hour video, but I scanned the transcript and I didn't see anything that said that Apple currently (at that time) scanned content.

Re:Apple defends anti-child abuse imagery tech after claims ... by CubsFan1060 on Wednesday August 18, 2021 @06:53PM (#28228151)
I can’t find any articles about eff complaining about gmail, onedrive, or discord doing similar scanning either. All of those services (and more) do similar scans.
Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:59PM (#28227077)
But you can tho…
Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @05:03PM (#28227116)
Please show evidence where the feature can be turned off (without having to completely disable iCloud photos).
Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @05:16PM (#28227279)
You turn it off by turning off iCloud photos, I never claimed otherwise.

If you don’t trust Apple why would you use iCloud anyway? Makes no sense.

Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @06:27PM (#28227942)
> You turn it off by turning off iCloud photos, I never claimed otherwise.

I just have to point out the ridiculousness of this statement. With your logic any feature in any product can be "turned off" by not using the entire product at all. For example, the radio in my car sounds like shit, I guess I should just stop driving completely to avoid having to hear it.

In reality, this new "feature" will be a requirement of using iCloud Photos. The feature itself cannot be turned off. If your answer is to stop using iCloud Photos, that is no help for the millions of people who currently use iCloud Photos.

> If you don’t trust Apple why would you use iCloud anyway? Makes no sense.

I've trusted Apple for a long time because I felt like they were one of the only companies that cared about consumer privacy. After these actions I am less convinced of that. I'm not sure why that stance is so surprising.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @06:40PM (#28228058)
> In reality, this new "feature" will be a requirement of using iCloud Photos. The feature itself cannot be turned off. If your answer is to stop using iCloud Photos, that is no help for the millions of people who currently use iCloud Photos.

iCloud Photos can be used on Windows, for example. This scanning only applies to iOS devices. You could use iCloud Photos and not be subject to the scanning.

> I've trusted Apple for a long time because I felt like they were one of the only companies that cared about consumer privacy. After these actions I am less convinced of that. I'm not sure why that stance is so surprising.

Nothing about what they're doing is contradictory with privacy beyond what they're already doing. The only reason they're even implementing it this way is because they do care about privacy. They could just not encrypt and scan on the server like Google, Microsoft, Dropbox, Box.com and more.

Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @07:12PM (#28228346)
> iCloud Photos can be used on Windows, for example. This scanning only applies to iOS devices. You could use iCloud Photos and not be subject to the scanning.

That's great for the <0.001% of people who use iCloud Photos without an iPhone. Everyone else is SOL.

>Nothing about what they're doing is contradictory with privacy beyond what they're already doing. The only reason they're even implementing it this way is because they do care about privacy. They could just not encrypt and scan on the server like Google, Microsoft, Dropbox, Box.com and more.

False dichotomy. Apple doesn't have to do either of these things.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @07:20PM (#28228434)
NCMEC is an arm of the government. Either they share voluntarily or they get subpoenaed endlessly. Why do you think all of these companies even do this? lol

in any case I've given you the solution on how to use iCloud and not be scanned. Take your photos, sync your iDevice to your computer and manually upload to iCloud photos. there you go.

Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @07:39PM (#28228594)
> NCMEC is an arm of the government. Either they share voluntarily or they get subpoenaed endlessly.

A subpoena is a lot different than scanning every single photo on every user's device automatically.

> Why do you think all of these companies even do this? lol

Because most companies don't give a shit about privacy? And they will cave at even the slightest government pressure to do so. Honestly it's probably easier for them that way (but worse for the consumer).

> in any case I've given you the solution on how to use iCloud and not be scanned. Take your photos, sync your iDevice to your computer and manually upload to iCloud photos. there you go.

Gee thanks, your "solution" is 1000x harder to use than just using iCloud Photos on your iPhone. One of the biggest selling points of it now is for convenience, and this is pretty obvious so I'm starting to think you're just trolling at this point.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @08:11PM (#28228839)
If Apple really didn’t care about privacy they’d end e2ee and scan on the server side like Google and Microsoft.

> Because most companies don't give a shit about privacy? And they will cave at even the slightest government pressure to do so. Honestly it's probably easier for them that way (but worse for the consumer).

Most people don’t care. I’m giving you solutions and you’re taking about convenience how hard it is. Plugging in your phone is trivial. I assume you’re going to stick with iCloud even despite this “privacy” issue? If not, what are you switching to?

Re:Apple defends anti-child abuse imagery tech after claims ... by petersellers on Wednesday August 18, 2021 @09:12PM (#28229240)
> If Apple really didn’t care about privacy they’d end e2ee and scan on the server side like Google and Microsoft.

It's not black or white. Clearly Apple does care more about privacy than most other tech companies. That doesn't mean we shouldn't be critical of them when they make a mistake.

Also, Apple doesn't use e2ee now. AFAIK it's possible for them to decrypt the contents of your iCloud content, and they will do so and forward your data if legally required to.

> Most people don’t care. I’m giving you solutions and you’re taking about convenience how hard it is. Plugging in your phone is trivial.

I don't see what is so hard for you to understand about this - because of Apple's decision, I gain nothing and lose privacy. I shouldn't have to jump through extra hoops to avoid that, and it's reasonable to dislike Apple's position on this. In order to replicate the same functionality I would have to remember to sync my phone every night, and if I ever forgot and my phone died, I just lost data. Yours is an indefensible position when a MUCH easier solution exists today.

> I assume you’re going to stick with iCloud even despite this “privacy” issue? If not, what are you switching to?

That's a bold assumption. I haven't decided yet, for a couple reasons. One is that it's a pain in the ass to switch providers, so I'm going to wait and see if Apple actually follows through with it. Two is that it's possible that Apple is only implementing this so that they can in fact implement full e2ee and then tell law enforcement to kick rocks when they ask for user data (only allowing them to see the CSAM results before they are uploaded to the cloud). I might be willing to accept that compromise, but it's not clear that that is what their plan is.

Re:Apple defends anti-child abuse imagery tech after claims ... by fuzzer37 on Wednesday August 18, 2021 @04:33PM (#28226734)
> Personally I’d prefer this than no encryption and scanning in the cloud, which is already possible.

Why is that the alternative? How about everything is encrypted and nothing is scanned.

Re:Apple defends anti-child abuse imagery tech after claims ... by endisneigh on Wednesday August 18, 2021 @04:38PM (#28226780)
This is already possible if you self host your stuff. I’m talking about iCloud specifically here - backups are not encrypted so it’s either scan in the backend or scan on the client.

If you don’t want to be scanned you can turn it off. I honestly don’t see the issue. It seems the only thing people can say are hypothetical situations here.

Re:Apple defends anti-child abuse imagery tech after claims ... by saynay on Wednesday August 18, 2021 @04:48PM (#28226913)
Realistically, because if they don't have something to scan for it, countries / EU are going to require them to provide a backdoor to scan it. There are already proposals in the EU to that affect.
Re:Apple defends anti-child abuse imagery tech after claims ... by LatteLazy on Wednesday August 18, 2021 @05:17PM (#28227286)
>Personally I’d prefer this than no encryption and scanning in the cloud

How about neither? Just let people have their privacy. Some will misuse it. Thats life.

Re:Apple defends anti-child abuse imagery tech after claims ... by the8472 on Wednesday August 18, 2021 @05:31PM (#28227440)
> Personally I’d prefer this than no encryption and scanning in the cloud, which is already possible.

What is also possible: No scanning on your device and encrypted cloud storage. E.g. borg + rsync.net, mega, proton drive.

Re:Apple defends anti-child abuse imagery tech after claims ... by basisword on Thursday August 19, 2021 @03:30AM (#28231318)
If it's in the cloud you can choose not to use the cloud service. If it's on device - a device you'e spent over $1000 on and already own - you don't have a choice (unless you want to forgo all updates, including security patches).
Re:Apple defends anti-child abuse imagery tech after claims ... by robertoandred on Wednesday August 18, 2021 @04:29PM (#28226672)
Never let a good Apple controversy go to waste. Clickbait blogs are thrilled to have something like this.