News for hackers. Stuff that matters.

selsta

According to a NCMEC report Apple does not do any server side scanning of iCloud Photos and Drive – that's why they only report a couple hundred of people to NCMEC per year. Of course they have the possibility to scan unencrypted files (and for known hashes) but this is a good real world indicator that they haven't been doing it.

> Last year, while Meta’s Facebook and Instagram submitted a combined 26 million reports, Google 2 million, and TikTok nearly 300,000, Apple submitted 234. The year before that: 160.

> Apple isn’t a social media company, so this is hardly a direct comparison. That said, WhatsApp, which is end-to-end encrypted, scans unencrypted content such as profile and group photos for CSAM. It provided over 1 million cybertips to NCMEC in 2022; Microsoft sent in 110,000; Dropbox, nearly 46,000; and Synchronoss, the cloud storage provider for Verizon, over 30,000.

https://www.forbes.com/sites/thomasbrewster/2023/09/07/apple...

Apple has a list of all metadata that uses regular encryption instead of E2EE: https://support.apple.com/en-us/HT202303
The linked post is incorrect, Apple Music doesn't touch or replace any local files. iTunes Match has also been DRM-free since launch.
Pixel 7 is made in China according to this tweet: https://twitter.com/vvaiibhav/status/1580454957580681216
WhatsApp runs on devices with iOS 12 or newer, that means even an iPhone 6 can still run it.
Re:Google Pixel 7 and Pixel 7 Pro on Thursday October 06, 2022 @11:21AM (#33109381)
5 years of security updates, not necessarily full OS updates.
Re:Google Pixel 7 and Pixel 7 Pro on Thursday October 06, 2022 @11:03AM (#33109115)
Google has been completely silent about it, just yesterday another person reported the 911 bug with the Pixel 6 Pro.

https://reddit.com/r/GooglePixel/comments/xwjnf2/pixel_6_pro...

https://news.ycombinator.com/item?id=32713375

These two are not the same thing. Every app is allowed to serve you personalized ads, without asking. ATT is about cross app/site tracking between other companies, which is something Apple has never done.
Re:Analysis of Apple Watch running data on Sunday September 25, 2022 @01:48PM (#32973916)
The Huawei Fit performed significantly worse compared to the Apple Watch in this sleep test: https://www.youtube.com/watch?v=LPqtfC70QTU
Re:Mullvad VPN now accepts Monero payments on Tuesday May 03, 2022 @11:16AM (#31249349)
monero, without dev tax and pre-mine, simply doesn't have the funds to compete in research with other, more well funded projects. I don't see how a different emission curve would have helped here.

MRL work is progressing on Seraphis[1] which will allow for significantly higher ring sizes without increasing the transaction size. A proof of concept is currently in development.

[1] https://www.getmonero.org/2021/12/22/what-is-seraphis.html

Re:Low Framerate in Safari on M1 Mac on Saturday November 13, 2021 @08:01PM (#29214620)
Low power mode wasn't enabled by default on my machine.
Re:Apple Is Normalising Surveillance on Tuesday October 26, 2021 @08:22AM (#28999498)
Apple asks you if you want personalized ads in the app store and news app: https://www.theverge.com/2021/9/2/22654121/apple-personalize...
Re:Google digital advertising antitrust litigation [pdf] on Sunday October 24, 2021 @04:24AM (#28975892)
I have found AMP to be an awful experience. It messes with native scrolling physics, pages are often incomplete or straight up broken. It also disables Reader mode on iOS so I'm always forced to load the full web page anyway. Luckily iOS 15 web extensions have solved that problem.
Re:Google digital advertising antitrust litigation [pdf] on Sunday October 24, 2021 @03:50AM (#28975733)
FWIW Amplosion (paid iOS extension to automatically redirect AMP pages) is quite highly ranked on the app store.

It clearly isn't only techies that dislike it so much that they actually pay to get rid of AMP.

Re:iPhone 13 Pro camera review: Tanzania on Friday September 24, 2021 @11:41AM (#28643931)
These images appear to be significantly downsized for the blog, you can't use them to judge sharpness.
Re:Why Monero on Tuesday September 14, 2021 @04:53AM (#28522005)
The CLI does support Ledger but it uses the same monerod binary as the GUI.

Did you export your view key with Ledger? If you refuse it can cause hanging and crashes. With exported view key and the latest version there shouldn't be any of the issues you are describing.

Re:Why Monero on Tuesday September 14, 2021 @01:36AM (#28520637)
When was the last time you tried the desktop GUI? It has improved significantly over the years.

Also you should try out Feather wallet[1], it has a more classic Qt design.

[1] https://featherwallet.org/

Re:Why Monero on Tuesday September 14, 2021 @01:22AM (#28520557)
The Wikipedia article is incorrect, Monero still uses ring signatures. Bulletproofs are used as efficient range proofs in RingCT to hide the amount in transactions.

https://www.getmonero.org/2017/12/07/Monero-Compatible-Bulle...

Re:Why Monero on Tuesday September 14, 2021 @01:11AM (#28520486)
Did you open an issue? There is no known bug like you are describing regarding hardware wallets and full nodes.
This has always been the case when uploading something to the cloud unencrypted. You never had any privacy in the first place.
> Last year, for instance, Apple reported 265 cases to the National Center for Missing & Exploited Children, while Facebook reported 20.3 million

According to [1] it does seem like Apple didn't do any wide scale scanning of iCloud Data.

[1] https://www.nytimes.com/2021/08/05/technology/apple-iphones-...

The CSAM detection technical summary [1] only mentions iOS and iPadOS.

If it does come to macOS it will be part of Photos.app, as that's the only way to interact with iCloud Photos. I would recommend you to avoid that app and cloud in general if you care about privacy.

[1] https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

Re:Apple’s Mistake on Tuesday August 10, 2021 @12:08AM (#28125059)
OCSP isn't "scanning". It checks if a certificate is revoked.

https://blog.jacopo.io/en/post/apple-ocsp/

Don't use the cloud if you care about privacy, or encrypt the data yourself before uploading. Has always been the case.
Re:Apple’s Mistake on Monday August 09, 2021 @05:04PM (#28122320)
> Next, iOS and iPadOS will use new applications of cryptography to help limit the spread of CSAM online, while designing for user privacy. CSAM detection will help Apple provide valuable information to law enforcement on collections of CSAM in iCloud Photos.

The CSAM scanning is only getting added to iOS and iPadOS. If it does getting added to Mac at some point it will be part of Photos.app, not the general OS.

Re:The Apple Psi System [pdf] on Sunday August 08, 2021 @09:05AM (#28106409)
This is already possible today on both iCloud Photos and Google Photos. Both scan for CSAM server side.
Re:The Apple Psi System [pdf] on Sunday August 08, 2021 @09:03AM (#28106395)
This is already possible on both iOS (iCloud Photos) and Android (Google Photos) as both scan for CSAM server side.
How is this iCloud specific? You could do the same with Google Photos or OneDrive.
This is already possible today with things like iCloud Photos, Google Photos, OneDrive etc.
Re:Ethereum just activated its ‘London’ hard fork on Thursday August 05, 2021 @02:48PM (#28077868)
Monero's PoW algorithm is RandomX [1], which is optimized for CPU mining. While it is possible to mine with GPUs, it is significantly slower and unprofitable.

[1] https://github.com/tevador/RandomX/blob/master/doc/design.md

Older »