Dumb is a pretty accurate description of a large fraction of criminals. For the most part you only get smart criminals when you are talking about crimes where you have to be smart to even plan and carry out the crime.
Darknet might sound bit complex, but as darknet user, you literally just install different browser.
We're just in an echo chamber of people who know what JavaScript is, and that distorts our perception of the world.
It's a dauntins realisation that sinks in once you have to do support for a web site or app catering to the general population instead of a niche.
They don't read, don't know the diff between an app and a web site, don't know right click or drag and drop, think google or chrome is the internet and overall their startegy to solve any problem is as follow:
- look for something obvious that seems like the answer but is not scary
- click
- wait for it
- repeat 3 times until ok or give up and call someone or get angry or both
Working on a streaming video site really opened my eyes on this one. Most tickets we received were insults, some were incomprehensible garbage, a few were actionable request from someone not understanding anything about their computer.
This is nothing like your github ticket. Your parent number are being generous IMO.
Reading your comment, I realize how these… ‘criminals’ could use phone number networks to share illegal sexual content peer to peer.
In other words, Apple doesn’t need to analyze your images to find these criminals. They only need to analyze the frequency or quantity of flagged images.
In other words not one image correctly/falsely tagged, but individuals and networks of individuals who are *collecting* and *storing* mass quantities of these images. And, they’re using Apple privacy and security to hide from law enforcement.
Racketeering?
Decompress and downsample. Drop the least significant bit or two, maybe do it in the dct domain instead. SHA256. It'll preserve matching for at least some cases of recompression and downsampling. But finding an unrelated image that matches is as hard as attacking SHA256, the only false positives that could be found would be from erroneous database entries.
Is there any reading on that? I'd love it to be true.