Apparently not that hard: https://github.com/AsuharietYgvar/AppleNeuralHash2ONNX/issue....
See also here: https://gist.github.com/unrealwill/c480371c3a4bf3abb29856c29...
See also here: https://gist.github.com/unrealwill/c480371c3a4bf3abb29856c29...
All you need to do to cause trouble right now, would be to get a bad image, hash it yourself, make a collision and distribute that.
Let's say for the time being that the list hashes themselves will be server-side. You won't ever get that list, but you don't need it in order to cause a collision. You would need your own supply of CSAM to hash yourself, which while distasteful is clearly also not impossible.