Hacker News new | ask | show | jobs
by square_usual 1774 days ago
Mega and Stingle are the only options I'm aware of that are "truly" private, and every other major cloud storage provider will scan your files for CSAM. The best way forward for truly privacy conscious people would be to roll their own NextCloud instance, because any public service that allows you to store E2EE images will get hunted by the Government for allowing CSAM if they reach any significant userbase. Case in point, even good ol' MegaUpload scanned for CSAM, because that's a bigger risk than getting sued by the MPAA.
2 comments

Dumb question but would an S3 bucket be scanned by CSAM?

Ehh idk seems like a dumb concern/losing battle. My thing is about IP. I picked up this e-ink tablet and it syncs to their cloud service for example. Which you can stop but still... Ahh. Just feels like going in circles, ISP knows your content, VPN, is your device actually secure, etc... Do you have anything to hide anyway.

I'm probably just paranoid ha I question using Trello putting "new IP" into it which they say is encrypted at rest so yeah. Gmail too like everything goes through that.

Anyway I'm average intelligence not developing cold fusion or something on my spare time so I don't really have IP anyway.

Here's an idea, a piece of paper and a pencil.

An s3 bucket will give you back an ETAG header for each file it holds, which is more or less the MD5 of a set of chunks that make up the file.

You can use that to identify files.

Only if the file is not uploaded via a multipart upload, which all SDKs do for any files larger than a megabyte.

If the object is encrypted with KMS, which almost everything is, then the hash is the encrypted contents and not the original contents.

> Dumb question but would an S3 bucket be scanned by CSAM?

Maybe, but if you E2EE it can't detect anything, anyway. (Please don't take this as an endorsement of child porn) NextCloud has preliminary E2EE support built in, but not for photos - yet.

Tresorit? Excellent app, speed, features, and Switzerland zero knowledge encryption. Also supports camera uploads as key feature for mobile.