Hacker News Reader

> Insists how? Was there a public statement? A phone call? With whom? An email? From whom?

Before bitching, actually read the article.

"In a statement emailed to The Register (!), an Apple spokesperson said:"

> If it is true what the article claims, that they give hashes to Tencent, then this statement is false

Is today really the first day all of y'all are hearing about Safe Browsing and how it works? The _prefix_ of the hash is sent to the blacklist service, not the entire thing.

The prefix is just a shorter hash. It specifies a set of urls. The urls that have a hash which begins with that prefix.

> The prefix is just a shorter hash

With all due respect, this makes no sense whatsoever. You can't make any meaningful conclusion (in isolation, or even with small enough/random enough datasets) about the content that was hashed from only a part of the resultant hash, that's the whole point of how hashing works.

It gives a 32-bit hash prefix (derived from Sha256) for a subset of URLs that matched a local database of suspicious prefixes. Those prefixes are used to request the provider send a list of malicious sha256 hashes with that prefix.