[ya3r]

Technically speaking, this does not prove that an adversarial attack is possible on the CSAM system of apple, Given that apple has another not released neural hash system on their servers which is potentially larger and works better than the one on device.

The more interesting technical question for me is: do collisions transfer across models? or how to find collisions that transfer across models?