Hacker News Reader

Comment by M4v3R | Hacker News Reader

Please do not spread misinformation. The system DOES scan your local device for photos that match CSAM hashes that are downloaded to the device. What you probably meant is that currently it is only enabled if you have iCloud Photos enabled (which almost everyone has), but now that the mechanism for client-side scanning is in place there’s nothing preventing them to turn it on later regardless of your user settings.

View on HN

I don’t like that system, but according to their summary document, CSAM detection system is only (as described today) processing images that are uploaded to iCloud.

[1] https://www.apple.com/child-safety/pdf/Expanded_Protections_...

Please look more carefully at that document. It says, on page 5: "Instead of scanning images in the cloud, the system performs on-device matching using a database of known CSAM image hashes provided by NCMEC and other child safety organizations."

And look at the diagram. The matching of image hashes with user photos occurs "on device."

On device != Scanning your device. It scans your iCloud uploads and if configured, iMessages (which you didnt mean, because that doesnt work with hashes)

The general worry is that the fact that it happens on the device means in the future it could conceivably scan your device, even if there are some software checks in place to only scan things being synced to iCloud.

I know that scanning is done by one’s device.

I just think that there are better arguments against it without unnecessary exaggeration. So I wanted to be more specific on which images on your device are scanned according to that paper.

Obviously I should have phrased is better, like “about to be uploaded to iCloud”…

I see. I didn't realize that was the distinction you were making, but now I see what you meant.

Just to spell this out (since I think this thread could still be a little confusing):

1. The photo scanning does occur on the device, not in the cloud. However,

2. Apple's explanation indicates that this device-based scanning will only occur on photos that may be uploaded to iCloud.

I'll need to see their source before I believe that. Apple ("privacy is a human right") lost their presumption of good faith when they announced that they will automatically notify law enforcement if their algorithms and processes suspect you're doing something naughty on your device.

Reply on news.ycombinator.com