1,106 karma · joined March 29, 2013
I don’t believe Apple has said whether or not they send them in their initial referral to NCMEC, but law enforcement could easily get a warrant for them. iCloud Photos are encrypted at rest, but Apple has the keys.
(Many have speculated that this CSAM local scanning feature is a precursor to Apple introducing full end-to-end encryption for all of iCloud. We’ll see.)
1. You have to reach a threshold of matches before your account is flagged.
2. Once the threshold is reached, the matched images are checked against a different perceptual hash algorithm on Apple servers. This means an adversarial image would have to trigger a collision on two distinct hashing algorithms.
3. If both hash algorithms show a match, then “visual derivative” (low-res versions) of the images are inspected by Apple to confirm they are CSAM.
Only after these three criteria are met is your account disabled and referred to NCMEC. NCMEC will then do their own review of the flagged images and refer to law enforcement if necessary.
[1]: https://www.apple.com/child-safety/pdf/Security_Threat_Model...
Yes, this is correct. The Messages feature only applies to children under 18 who are in an iCloud Family, and the photo library feature only applies if you are using iCloud Photos.
There is also scanning for nudity in the Messages app, but those scans happen on-device and the photos stay on-device even if nudity is detected.
- Only applies to photos uploaded to iCloud
- Matching against a known set of CSAM (Child Sexual Abuse Material) hashes occurs on-device (as opposed to the on-server matching done by many other providers)
- Multiple matches (unspecified threshold) are required to trigger a manual review of matched photos and potential account suspension
https://en.m.wikipedia.org/wiki/73rd_Primetime_Creative_Arts...
The previous generation of iPad Pros maxed out at 6 GB, so this is quite a jump.
Adding Thunderbolt support is also a bit of a mystery.
I suspect this will all become clear at WWDC in June when Apple announces iPadOS 15.
Apple did not lift this requirement for the Hey email app during the controversy over that last year. Instead, they reached a compromise where Hey would offer a free trial of their service inside the app, so they could be in compliance with the rule that an app must have some functionality without an account.
(For reference, only about 25 percent of NFL players are white.)
https://spectrum.ieee.org/automaton/aerospace/robotic-explor...
https://developer.apple.com/app-store/small-business-program...