Hacker News new | ask | show | jobs
by hypothesis 1766 days ago
They will be if you collide a low-res image that resembles CSAM.

Why would person doing manual review risk his job in case if he’s unsure? Naturally he will just play it safe and report images.
1 comments
ec109685 1766 days ago
Not resembles. The adversarial image has to match a private perceptual hash function of the same CSAM image that the NeuralHash function matched before a human reviewer ever looks at it.
link
onepunchedman 1766 days ago
Do you have any material on this private function?
link
ec109685 1766 days ago
Not beyond the documents Apple has shared. Presumably it will be kept that way given it prevents an adversarial attack against it.
link