News for hackers. Stuff that matters.
Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by danpalmer on Friday September 01, 2023 @07:04AM (#37349204)
Mass surveillance is bad, but I think there are versions of it that are far less bad than others.

Apple's proposed solution would have theoretically only reported cases that were much more than likely to be already known instances of CSAM (i.e. not pictures of your kids), and if nothing else is reported, can we say that they were really surveilled? In some very strict sense, yes, but in terms of outcomes, no.

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by Moldoteck on Friday September 01, 2023 @07:21AM (#37349346)
ok, and in theory, with new generative algorithms, do you think it's still ok? Suppose apple implements this, suppose someone finds a way to generate meme images that can trigger apple's algorithm(but human can't see anything wrong), suppose that someone wants to harm you and sends you a bunch of memes and you save them. What will happen? Or what does happen if somebody is using generative algorithm to create csam like images by using people's face as base but the rest of the image is generated, should this also trigger csam?

Also, you can not guarantee that apple/google will use only known instances of csam, what if, govt orders them/google to scan for other type of content under the hood, like documents or god knows what else bc govt want's to screw that person (for the sake of example let's suppose the targeted person is some journalist that discovered shady stuff and govt wants to put em in prison), bc you know, you don't have access to either algorithms and csam scan list that they are using, system could be abused and usually could means 'sometime' it will

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by danpalmer on Friday September 01, 2023 @10:30AM (#37351304)
These criticisms are reasonable criticisms of a system in general, but Apple's design featured ways to mitigate these issues.

I agree that the basic idea of scanning on device for CSAM has a lot of issues and should not be implemented. What I think was missing from the discourse was an actual look at what Apple were suggesting, in terms of technical specifics, and why that would be well designed to not suffer from these problems.

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by pseudalopex on Friday September 01, 2023 @06:23PM (#37356768)
Apple's mitigations and their inadequacy were discussed.
Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by candiodari on Friday September 01, 2023 @07:34AM (#37349440)
How about we start with this version of surveillance: currently it is almost impossible, and frankly stupid, for kids to ask for help with abuse, because they'll end up in this sort of system (with no way out one might add)

https://www.texastribune.org/2022/07/26/texas-foster-care-ch...

So how about we implement mass-surveillance by giving victims a good reason to report crimes? Starting with not heavily punishing victims that do come forward. Make the foster care system actually able to raise kids reasonably.

Because, frankly, if we don't do it this way, what's the point? Why would we do anything about abuse if we don't fix this FIRST? Are we really going to catch sexual abuse, then put the kids into a state-administered system ... where they're sexually, and physically, and mentally, and financially abused?

WHY would you do that? Obviously that doesn't protect children, it only hides abuse, it protects perpetrators in trade for allowing society to pretend the problem is smaller than it is.

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by figlett on Friday September 01, 2023 @07:54AM (#37349613)
Mass surveillance isn't necessarily bad. It depends how it's implemented. The solution you describe is basically how it works with the intelligence agencies, in that only a miniscule fraction of the data collected in bulk ever reaches human eyes. The rest ends up being discarded after the retention period.

In terms of outcomes, almost nobody is actually surveilled, as the overall effect is the same as no data having been collected on them in the first place.

That said, I am personally more comfortable with my country's intelligence agencies hoovering up all my online activity than I am with the likes of Apple. The former is much more accountable than the latter.

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by jtbayly on Friday September 01, 2023 @09:57AM (#37350912)
Correction: the rest just ends up getting searched thousands of times, in direct violation of the US constitution.
Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by chatmasta on Friday September 01, 2023 @08:03PM (#37357423)
If your ex-spouse was a contractor for a government agency with access to the mass surveillance machine, would you still feel comfortable "that only a miniscule fraction of the data collected in bulk ever reaches human eyes?"

What if you were a candidate for political office, pushing opinions that angered large swaths of the Intelligence Comminity?

The "minuscule fraction" of content is not surfaced by some random roll of the dice - it's the definitionally most interesting content, in the sense that some human went specifically looking for it in the heap of content caught in the dragnet. And it only needs to be interesting to at least one person with the clearance to search for it.

Maybe that means it's a video of a child being abused, and some morally upstanding federal officer is searching for it because anyone possessing it is ethically and legally culpable for the abuse of that child... Or maybe it's a PDF containing evidence of FBI kidnapping and torturing innocent civilians, and some morally corrupt federal officer is searching for it because anyone possessing it is a liability who needs to be silenced... Or maybe it's a JSON file containing the GPS locations of an individual for the past year, and some emotionally scorned federal contractor is searching for it because that individual is their ex-spouse who's moved onto a new partner.

Are you really prepared to put your faith in the trustworthiness and moral clarity of the population of 100k+ people with federal security clearances?

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by figlett on Friday September 01, 2023 @09:02PM (#37357735)
What leads you to believe that access to search these datasets is some sort of unregulated, unmonitored free-for-all for anyone allowed to wander into an intelligence agency building?

The scenarios you invented sound very far-fetched to me, if these did happen I very much doubt the perpetrator would be able to get away with it.

Re:Apple Clarifies Why It Abandoned Plan to Detect CSAM in i... by chatmasta on Friday September 01, 2023 @09:35PM (#37357888)
> In 2021 alone, the FBI conducted up to 3.4 million warrantless searches of Section 702 data to find Americans’ communications

https://www.eff.org/deeplinks/2023/04/internal-documents-sho...

> At least a dozen U.S. National Security Agency employees have been caught using secret government surveillance tools to spy on the emails or phone calls of their current or former spouses and lovers in the past decade, according to the intelligence agency’s internal watchdog.

https://www.reuters.com/article/us-usa-surveillance-watchdog...