Jerry the AdminSep 27, 2023
This Firefish server, bostonsocial.online, and Mastodon server, hear-me.social, now has #CSAM (Child Sexual Abuse Material) scanning active.

If the hash of any image matches the hash of a known CSAM image in the NCMEC.ORG database, a report will be automatically filed, and the image will be blocked. It will soon be deleted from the bucket.

While I realize that nobody on these two servers are involved in sending or receiving CSAM images, because this server relays with over 1,500 other servers, the scans are needed as these images can easily find their way in via the relay.

For clarification, the images are not seen by anyone or any software. A mathematical hash is calculated from the image binary and is matched to a hash stored in the database.

#Mastodon #MastoAdmin
Show threadMike FraserSep 27, 2023
@admin Is this proprietary to these servers or is there an open CSAM tool that we can implement? If so are there notes on setup?
Show threadJeffSep 27, 2023

@mike

He's using Cloudflare so my money is on that he's probably using CF's CSAM scanner.

Cloudflare has a pretty good CSAM solution and is better than what I've been able to implement so far.

Show threadiam-py-test

@jeff @mike I'm curious how you know CF's CSAM scanner is good?
Have you used it before? Have you tested it to see if it has false negatives/positives?

Do you know of any alternatives?
CloudFlare is very untrustworthy company.

Sep 27, 2023 at 6:14pmWeb
Show threadJeffSep 27, 2023

@iampytest1 @mike

1: I've used it and use it now

2: There is always the chance for false neg/pos.

3: There are several tools available for csam scanning including one that I built CF's and Safer among others,

4: I don't consider CF to be "very untrustworthy" quite the opposite.

Show threadiam-py-testSep 27, 2023

@jeff @mike Ok, thanks. I am curious how it works. Is there a lookup API, or do you get a whole database of hashes?

Re Cloudflare: https://0xacab.org/dCF/deCloudflare/-/blob/master/readme/en.md

Thanks.

readme/en.md · master · Crimeflare / deCloudflare · GitLab

The Great Cloudwall / Stop Cloudflare / #deCloudflare #Crimeflare http://crimeflare.eu.org

GitLab
Show threadJeffSep 27, 2023

@iampytest1 @mike

https://www.cloudflare.com/trust-hub/child-safety/#:~:text=Once%20enabled%2C%20the%20CSAM%20Scanning,customer%20so%20that%20they%20can

Child safety - Cloudflare

Learn more about how Cloudflare helps our customers make their websites safer for children and helps parents protect their children while using the Internet.

Cloudflare
Show threadiam-py-testSep 27, 2023
@jeff Thanks