The Times Australia
Friday, April 4, 2025 3:25:51 PM
The Times World News

.
The Times Real Estate

.

Apple can scan your photos for child abuse and still protect your privacy – if the company keeps its promises

  • Written by Mayank Varia, Research Associate Professor of Computer Science, Boston University

The proliferation of child sexual abuse material[1] on the internet is harrowing and sobering. Technology companies send tens of millions of reports per year[2] of these images to the nonprofit National Center for Missing and Exploited Children[3].

The way companies that provide cloud storage for your images usually detect child abuse material leaves you vulnerable to privacy violations by the companies – and hackers who break into their computers. On Aug. 5, 2021, Apple announced a new way to detect this material[4] that promises to better protect your privacy.

As a computer scientist[5] who studies cryptography, I can explain how Apple’s system works, why it’s an improvement, and why Apple needs to do more.

Who holds the key?

Digital files can be protected in a sort of virtual lockbox via encryption, which garbles a file so that it can be revealed, or decrypted, only by someone holding a secret key. Encryption is one of the best tools for protecting personal information as it traverses the internet.

Can a cloud service provider detect child abuse material if the photos are garbled using encryption? It depends on who holds the secret key.

Many cloud providers, including Apple, keep a copy of the secret key so they can assist you in data recovery[6] if you forget your password. With the key, the provider can also match[7] photos stored on the cloud against known child abuse images held by the National Center for Missing and Exploited Children.

But this convenience comes at a big cost. A cloud provider that stores secret keys might abuse its access[8] to your data[9] or fall prey to a data breach[10].

A better approach to online safety is end-to-end encryption[11], in which the secret key is stored only on your own computer, phone or tablet. In this case, the provider cannot decrypt your photos. Apple’s answer to checking for child abuse material that’s protected by end-to-end encryption is a new procedure in which the cloud service provider, meaning Apple, and your device perform the image matching together.

Spotting evidence without looking at it

Though that might sound like magic, with modern cryptography it’s actually possible to work with data that you cannot see. I have contributed to projects that use cryptography to measure the gender wage gap[12] without learning anyone’s salary[13], and to detect repeat offenders of sexual assault[14] without reading any victim’s report[15]. And there are many more examples[16] of companies and governments using cryptographically protected computing to provide services while safeguarding the underlying data.

Apple’s proposed image matching[17] on iCloud Photos uses cryptographically protected computing to scan photos without seeing them. It’s based on a tool called private set intersection[18] that has been studied by cryptographers since the 1980s. This tool allows two people to discover files that they have in common while hiding the rest.

Here’s how the image matching works. Apple distributes to everyone’s iPhone, iPad and Mac a database containing indecipherable encodings of known child abuse images. For each photo that you upload to iCloud, your device applies a digital fingerprint[19], called NeuralHash. The fingerprinting works even if someone makes small changes in a photo. Your device then creates a voucher for your photo that your device can’t understand, but that tells the server whether the uploaded photo matches child abuse material in the database.

a diagram with a representation of a smartphone and icons representing a photo and digital fingerprints Apple’s new system for comparing your photos with a database of known images of child abuse works on your device rather than on a server. courtesy Apple[20]

If enough vouchers from a device indicate matches to known child abuse images, the server learns the secret keys to decrypt all of the matching photos – but not the keys for other photos. Otherwise, the server cannot view any of your photos.

Having this matching procedure take place on your device can be better for your privacy than the previous methods, in which the matching takes place on a server – if it’s deployed properly. But that’s a big caveat.

Figuring out what could go wrong

There’s a line in the movie “Apollo 13”[21] in which Gene Kranz, played by Ed Harris, proclaims, “I don’t care what anything was designed to do. I care about what it can do!” Apple’s phone scanning technology is designed to protect privacy. Computer security and tech policy experts are trained to discover ways that a technology can be used, misused and abused, regardless of its creator’s intent. However, Apple’s announcement lacks information to analyze essential components[22], so it is not possible to evaluate the safety of its new system.

Security researchers need to see Apple’s code to validate that the device-assisted matching software is faithful to the design and doesn’t introduce errors. Researchers also must test whether it’s possible to fool Apple’s NeuralHash algorithm into changing fingerprints by making imperceptible changes to a photo[23].

It’s also important for Apple to develop an auditing policy to hold the company accountable for matching only child abuse images. The threat of mission creep was a risk even with server-based matching. The good news is that matching devices offers new opportunities to audit Apple’s actions because the encoded database binds Apple to a specific image set. Apple should allow everyone to check that they’ve received the same encoded database and third-party auditors to validate the images contained in this set. These public accountability goals can be achieved using cryptography[24].

Apple’s proposed image-matching technology has the potential to improve digital privacy and child safety, especially if Apple follows this move by giving iCloud end-to-end encryption[25]. But no technology on its own can fully answer complex social problems. All options for how to use encryption and image scanning have delicate, nuanced effects[26] on society.

These delicate questions require time and space to reason through potential consequences of even well-intentioned actions before deploying them, through dialogue[27] with affected groups and researchers with a wide variety of backgrounds. I urge Apple to join this dialogue so that the research community can collectively improve the safety and accountability of this new technology.

[The Conversation’s science, health and technology editors pick their favorite stories. Weekly on Wednesdays[28].]

References

  1. ^ child sexual abuse material (www.nytimes.com)
  2. ^ tens of millions of reports per year (www.missingkids.org)
  3. ^ National Center for Missing and Exploited Children (www.missingkids.org)
  4. ^ announced a new way to detect this material (www.apple.com)
  5. ^ computer scientist (scholar.google.com)
  6. ^ data recovery (support.apple.com)
  7. ^ the provider can also match (www.macobserver.com)
  8. ^ abuse its access (www.vice.com)
  9. ^ to your data (www.telegraph.co.uk)
  10. ^ data breach (epic.org)
  11. ^ end-to-end encryption (ssd.eff.org)
  12. ^ measure the gender wage gap (thebwwc.org)
  13. ^ without learning anyone’s salary (www.usenix.org)
  14. ^ detect repeat offenders of sexual assault (www.mycallisto.org)
  15. ^ without reading any victim’s report (static1.squarespace.com)
  16. ^ many more examples (drive.google.com)
  17. ^ Apple’s proposed image matching (www.apple.com)
  18. ^ private set intersection (blog.openmined.org)
  19. ^ applies a digital fingerprint (www.apple.com)
  20. ^ courtesy Apple (www.apple.com)
  21. ^ line in the movie “Apollo 13” (www.youtube.com)
  22. ^ lacks information to analyze essential components (twitter.com)
  23. ^ making imperceptible changes to a photo (twitter.com)
  24. ^ can be achieved using cryptography (www.bu.edu)
  25. ^ giving iCloud end-to-end encryption (www.reuters.com)
  26. ^ delicate, nuanced effects (mobile.twitter.com)
  27. ^ dialogue (cyber.fsi.stanford.edu)
  28. ^ Weekly on Wednesdays (theconversation.com)

Read more https://theconversation.com/apple-can-scan-your-photos-for-child-abuse-and-still-protect-your-privacy-if-the-company-keeps-its-promises-165785

The Times Features

The Benefits of Animal-Assisted Speech Therapy For Children

Speech therapy has long been a standard for supporting children’s communication and emotional development. But what happens when you introduce a furry friend into the process? Th...

The Hidden Dangers of Blocked Drains and the Ultimate Solution for a Hassle-Free Home

Drain blockages are a big hassle to every homeowner and business owner alike. Whether it is a sink in the kitchen or bathroom, a clogged toilet, or a foul smell circulating aroun...

Understanding the Dangers of Ignoring a Gas Leak

Gas leaks are silent threats lurking within both homes and workplaces. A gas leak occurs when natural gas or any other gaseous substance escapes from a pipeline or containment. T...

Can You Sell Your House Privately in Queensland? Here’s How

Selling a house privately in Queensland is entirely possible and can be a cost-effective alternative to using a real estate agent. While agents provide valuable expertise, their co...

Itinerary to Maximize Your Two-Week Adventure in Vietnam and Cambodia

Two weeks may not seem like much, but it’s just the right time for travelers to explore the best of Vietnam and Cambodia. From the bustling streets of Hanoi to the magnificent te...

How to Protect Your Garden Trees from Wind Damage in Australia

In Australia's expansive landscape, garden trees hold noteworthy significance. They not only enhance the aesthetic appeal of our homes but also play an integral role in the local...

Times Magazine

CWU Assistive Tech Hub is Changing Lives: Win a Free Rollator Walker This Easter!

🌟 Mobility. Independence. Community. All in One. This Easter, the CWU Assistive Tech Hub is pleased to support the Banyule community by giving away a rollator walker. The giveaway will take place during the Macleod Village Easter Egg Hunt & Ma...

"Eternal Nurture" by Cara Barilla: A Timeless Collection of Wisdom and Healing

Renowned Sydney-born author and educator Cara Barilla has released her latest book, Eternal Nurture, a profound collection of inspirational quotes designed to support mindfulness, emotional healing, and personal growth. With a deep commitment to ...

How AI-Driven SEO Enhancements Can Improve Headless CMS Content Visibility

Whereas SEO (search engine optimization) is critical in the digital landscape for making connections to content, much of it is still done manually keyword research, metatags, final tweaks at publication requiring a human element that takes extensiv...

Crypto Expert John Fenga Reveals How Blockchain is Revolutionising Charity

One of the most persistent challenges in the charity sector is trust. Donors often wonder whether their contributions are being used effectively or if overhead costs consume a significant portion. Traditional fundraising methods can be opaque, with...

Navigating Parenting Arrangements in Australia: A Legal Guide for Parents

Understanding Parenting Arrangements in Australia. Child custody disputes are often one of the most emotionally charged aspects of separation or divorce. Parents naturally want what is best for their children, but the legal process of determining ...

Blocky Adventures: A Minecraft Movie Celebration for Your Wrist

The Minecraft movie is almost here—and it’s time to get excited! With the film set to hit theaters on April 4, 2025, fans have a brand-new reason to celebrate. To honor the upcoming blockbuster, watchfaces.co has released a special Minecraft-inspir...

LayBy Shopping