Apple iCloud CSAM Scanning

The cluster discusses Apple's proposed on-device scanning of photos for CSAM before iCloud upload, debating privacy implications, misconceptions about the feature, and comparisons to server-side scanning by Google, Facebook, and others.

📉 Falling 0.1x Security
3,568
Comments
16
Years Active
5
Top Authors
#3718
Topic ID

Activity Over Time

2011
2
2012
5
2013
7
2014
8
2015
7
2016
5
2017
11
2018
3
2019
11
2020
8
2021
2,672
2022
402
2023
225
2024
131
2025
68
2026
5

Keywords

theverge.com MS US OneDrive apple.com terms.html VERIFIED TOS FB HN icloud scanning csam apple photos uploaded images scan device upload

Sample Comments

pcurve Aug 20, 2021 View on HN

"Apple's privacy measures, such as not scanning your Cloud photos, is what helps enable CSAM."this is what baffles me.I'm sure a good number of iphone customers have their photos automatically uploaded to icloud.For all intents and purposes, the end result is the same for most people. Apple is scanning your photos, and doing so on your phone feels much more intrusive.

matwood Aug 7, 2021 View on HN

Exactly. Many people who are upset about having their images scanned before going to iCloud don't seem to realize all the big providers (Apple, Google, FB, Twitter, MS, etc...) have been scanning images with CSAM for years already.The client side/server side also does not matter because iOS users have had to trust Apple implicitly since day 1. All the 'what ifs' existed whether or not Apple added this feature.I speculate that Apple is going to announce an expansion of E

whoknowswhat11 Aug 18, 2021 View on HN

As has been repeated over and over, apple only scans photos that are part if icloud photos (ie, uploaded).Don't want your photo's scanned, don't sync them to icloud. Seriously! Please include the actual system when discussing this system, not your bogeyman system."To help address this, new technology in iOS and iPadOS* will allow Apple to detect known CSAM images stored in iCloud Photos."To increase privacy - they perform the scan on device prior to upload.

notJim Aug 13, 2021 View on HN

I wouldn't be surprised at all if they actually are confused. Consider from Apple's perspective. They were being criticized for allowing CSAM to be uploaded to iCloud, since they don't scan for it. They see two options:* Start scanning all images uploaded to iCloud* Start scanning on-device, but only photos that are to be uploaded, and only alerting after some threshold is reachedNo matter what HN says, for them, not scanning is not an option. If you look at it this way,

m-ee Aug 23, 2022 View on HN

Apple was only going to scan images that were going to be uploaded to iCloud. It would be the same amount of coverage as what google does, and if you believe apples claims “more private” because it happens locally and would later let them roll out encrypted images on iCloud while still scanning for CSAM to satisfy the government.Of course you would have to trust that the policy of only iCloud images would stay in place after they implemented a tool to scan everything on your phone, which seem

alwillis Aug 14, 2021 View on HN

A device I own should not be allowed to collect and scan my data without my permission.It's not scanning; it's creating a cryptographic safety voucher for each photo you upload to iCloud Photos. And unless you reach a threshold of 30 CSAM images, Apple knows nothing about any of your photos.

anonuser123456 Aug 23, 2021 View on HN

There is an alternative, more reasonable way to look at the Apple proposal.The scanning occurs in order to upload files to iCloud photos. Your device is attesting that data you upload to iCloud photos is not pre-established CSAM. If you do not like the privacy implications of having your content inspected locally, on your device, simply choose another cloud photo provider and turn off iCloud photos.You are told about the system and you are free to turn the service off. That doesn't

angulardragon03 Dec 23, 2021 View on HN

Yes.People give Apple a lot of flak for the fact that Apple holds encryption keys for iCloud Photos (because obviously they do CSAM scanning server-side), but now that Apple is taking steps to ensure that they doesn’t hold these keys, they take flak again.If you don’t use iCloud photos, this change doesn’t affect you. If you use iCloud photos already, nothing changes for you except where in the process the scanning takes place. Your phone already scans all your photos while your phone is a

zepto Aug 9, 2021 View on HN

> Apple is doing it, soon, on your phone.Apple is only checking images you choose to upload to iCloud photos to see if you are uploading a collection of CSAM. This is entirely optional, and they have publicly explained what they are doing.They are not sniffing through your communications as they see fit.

theshrike79 Sep 1, 2023 View on HN

Let's take a step back here and bring in some facts."Apple" wasn't scanning your phone, neither was there a "backdoor".If you would've had iCloud upload enabled (you'd be uploading all your photos to Apple's server, a place where they could scan ALL of your media anyway), the phone would've downloaded a set of hashes of KNOWN and HUMAN VERIFIED photos and videos of sexual abuse material. [1]After THREE matches of known and checked