On: There’s a crack in the iPhone foundation and it could get a lot worse

[stetrain]

But Apple doesn't report to authorities based only on a hash match.

[themaninthedark → stetrain]

They hash the files on your device.

The hashes are then sent out to for comparison to the hash table.

Right now they are only comparing to the CSAM table but they can add other later.

Also, how are the hashes sent? Can they be intercepted?

[stetrain → themaninthedark]

Yes but there is a manual review step. A hash match does not automatically report to authorities.

If the Apple reviewer looks at the images that were flagged and doesn’t see CSAM, they don’t report it.

[stetrain → stetrain]

A human at Apple reviews thumbnails of the flagged images to see if they are actually CSAM. You do not get reported just because of a hash match.