Hash collision in Apple NeuralHash model
How can you use it for targeted attacks?<p>This is what would need to happen:<p>1. Attacker generates images that collide with known CSAM material in the database (the NeuralHashes of which, unless I'm mistaken, are not available)<p>2. Attacker sends that to innocent person<p>3. Innocent person accepts and stores the picture<p>4. Actually, need to run step 1-3 at least 30 times<p>5. Innocent person has iCloud syncing enabled<p>6. Apple's CSAM detection then flags these, and they're manually reviewed<p>7. Apple reviewer confuses a featureless blob of gray with CSAM material, several times<p>Note that other cloud providers have been scanning uploaded photos for years. What has changed wrt targeted attacks against innocent people?