Hacker News Reader

Great explainer why this won’t happen:

https://pingthread.com/thread/1424873629003702273

> For the conspiracy to work, it'd need Apple, NCMEC and DOJ working together to pull it off voluntarily and it to never leak. If that's your threat model, OK, but that's a huge conspiracy with enormous risk to all participants

View on HN

I'm not sure how that's relevant to my comment. I'm not saying any particular thing will happen. I was just disagreeing with the person who said "The only thing that prevents ... from executing arbitrary code on your system is their promise to keep the scope of updates limited. You already operate under this trust model." My disagreement is that it's more complex than "the only thing".

No, it does not require Apple, NCMEC and DOJ working together.

Apple could intercept hashes that are sent and compare to their own database.

Someone in the NCMEC could add non CSAM hashes to their database.

It sounds like you didn't read what I posted, and why the NCMEC can't just add arbitrary hashes.

Reply on news.ycombinator.com