News for hackers. Stuff that matters.
Re:Apple Delays Rollout of Child Safety Features by sweetheart on Friday September 03, 2021 @12:15PM (#28406139)
I also don't understand the vector everyone seems worried about. Also considering that perceptual hashing isn't new, as far as I'm aware, and it hasn't seemingly yet led to any sort of wave of innocent folks being screwed over sham illicit images.

I think there _is_ an argument to be made about a system like this being used to track the spread of political material, and it's easy to see how such a system would be terrible for anyone trying to hide from an authoritarian power of some type, but that'd already require Apple is absolutely and completely compromised by an authoritarian regime, which isn't high on my list of concerns.

Re:Apple Delays Rollout of Child Safety Features by azalemeth on Friday September 03, 2021 @12:48PM (#28406546)
The main issue is that the system is basically a bit of snitching spyware dolled up with cryptographic magic to make it only work with really bad stuff, honest.

As recently posted on HN [1] one should be very wary of backdoors, no matter how much one believes only the right guys could ever use them. Once they're there, they're there: it's arrogant beyond believe to think that opponents of yours won't exploit them.

I won't use an apple product with this feature. I've been using apple's ecosystem since about 1994.

[1] https://twitter.com/matthew_d_green/status/14334701097425182... and https://news.ycombinator.com/item?id=28404219

Re:Apple Delays Rollout of Child Safety Features by mlac on Friday September 03, 2021 @04:10PM (#28408799)
I understand your points on backdoors, but I don't understand people trying to argue that the "Cryptographic Magic" is the bad part that will send people to prison due immediately upon "HASH COLLISIONS", in my view, takes away from the actual concerning points.
Re:Apple Delays Rollout of Child Safety Features by Zak on Friday September 03, 2021 @05:44PM (#28409770)
What most people are focused on is that this is spyware built in to the operating system. The fact that perceptual hashes have some weak points could also lead to problems, but that's not the main focus of most opposition to this system.
Re:Apple Delays Rollout of Child Safety Features by Griffinsauce on Friday September 03, 2021 @01:07PM (#28406763)
> Apple is absolutely and completely compromised by an authoritarian regime

I don't understand this, they can just be legally compelled.

Re:Apple Delays Rollout of Child Safety Features by cmsj on Friday September 03, 2021 @01:22PM (#28406912)
And they already are, Apple (and indeed all companies) have to follow all sorts of rules in all sorts of countries. Some of those rules are fairly harmless, some of them are about radio power levels, some of them are "don't show the Taiwanese flag in China".
Re:Apple Delays Rollout of Child Safety Features by mlac on Friday September 03, 2021 @01:37PM (#28407088)
And I also understand the concerns with this (and the potential downsides of the technology).

But a motivated bad actor has a lot easier time just putting an image of the Taiwanese flag or propaganda on someone's phone than trying to make it a hash collision that triggers... If an attacker is really after someone, I would expect them to put the actual material on that person's phone...

... It's like trying to frame someone for drugs in their car and going through the hassle of synthesizing a chemical that triggers drug dogs to react, but it isn't actually the drug. Wouldn't they just... buy drugs and stick them in the car?

Re:Apple Delays Rollout of Child Safety Features by zzo38computer on Friday September 03, 2021 @02:24PM (#28407599)
> Wouldn't they just... buy drugs and stick them in the car?

Maybe they want to create too many false positives deliberately, or maybe they do it just because they want to see if and how synthesizing such a chemical can be done.

When putting pictures on someone's phone or computer, there are ways to add false positives as well as maybe doing false negatives sometimes (e.g. by encrypting the picture or using an uncommon file format so that it must be converted, or using complicated HTML/JS/CSS to render it instead of just a picture file).

Also, if someone has the picture or drug or whatever to find if it is what they are, can you accuse them (maybe they are the police) of liking pictures and drugs, too?

Re:Apple Delays Rollout of Child Safety Features by sweetheart on Friday September 03, 2021 @03:08PM (#28408072)
Yeah sorry, I was a little vague. I consider that willingness to comply as already having been compromised. And I think, to be fair, if companies like Apple are ever in the position of using technologies like this to track individual dissidents of an authoritarian regime, we are already royally screwed.

But, to be clear, you make a legitimate point.

Re:Apple Delays Rollout of Child Safety Features by FabHK on Friday September 03, 2021 @02:13PM (#28407450)
> there _is_ an argument to be made about a system like this being used to track the spread of political material

How so? Unlike other cloud providers, which do scan all uploaded images server side, this system is specifically designed to prevent this.

(As you say, if Apple is entirely compromised, then all bets are off anyway.)