Google tipped off authorities to illicit images in Canadian doctor's account, search warrants say

https://lemmus.org/post/21044311

The detective alleges that that photograph and others she examined appeared to be stored in a folder on the iPhone titled “Girls I Drugged And Raped.”

Then it wasn’t hashes
The images I am referring to are likely distinct from the ones in the title as they are from his iPhone and Google is who reported him. Regardless in the article it says the detective looked at one of the Google reported images. Whether they just referenced a known hash I don’t know for sure, but I think it’s pretty well known that FAANG scan basically all images for CSAM nowadays.
If you read the article, it looks like only 9 images were originally reported by Google. The images in the folder called the girls I drugged and raped were on his iPhone that they broke into with Celebrate.
Also the guy’s last name is Poon.
I thought you both were trying to be funny. How is that even real.
Other languages and cultures besides white bread exist?
The other guys name is Butt. This article is trippy.

severe mix feelings.

glad they caught him, but corporations casually snooping through your data and report whatever they want is definitely not an good thing

Microsoft has been doing this for years. It was with Onedrive at first but now that they’ve enabled “analytics” in every product that might connect to the internet they can have it all searched.

Supposedly it is first filtered by algorithms but that shit is still being uploaded somewhere other than your hard drive.

I believe it was in preview build versions of Win 7 or 10 where researchers found it was sending the generated thumbnails of images on your PC to Redmond (MS HQ). Can’t remember if they said it was for CSAM detection or just a debugging feature in the preview builds.

the generated thumbnails of images on your PC

So the precursor to Recall?

They’re suggesting it was automated hash based recognition.

I don’t have a problem with CSAM hash matching.

my issue is that we have a framework for corporations to scan all your data and inform the state. used to stop CSAM, but it’s a matter of state policy wether said structure will be used to fight discent.
I agree. We’ve seen this happening in the USA “yes technically they can do that but they would never”. Now we know better.
Eventually “sprinkle some crack on him” will turn into “put some CSAM in his google drive”

“The first image in the ‘Nudity’ collection … depicted who I believe to be David Edward-Ooi Poon without a shirt, taking a selfie of himself while sticking out his tongue over an unconscious adult female,” the search-warrant application states. The document goes on to describe the woman in the photo as naked below the waist and wearing a dark-coloured eye mask over her eyes.

The detective alleges that that photograph and others she examined appeared to be stored in a folder on the iPhone titled “Girls I Drugged And Raped.”

Doesn’t sound like hashes to me.

That is the result of the search warrant.
Sure, until it starts flagging normal pictures with us janky AI and you get your door kicked in based on a warrant signed by Google.

This literally already happened here in Sweden. A guy got assaulted by masked police in the middle of the night because an American company had gone through photos in his Yahoo mail and flagged his 30 year old boyfriend as possible CSAM.

Long article in Swedish.

People like to think that Sweden is progressive etc. and I’d rebut it with this. If it can happen here, it could happen anywhere.

Babak Karimi: "Jag misshandlades av maskerad polis i mitt eget sovrum"

Babak Karimi berättar att hans dag börjar med att polisen står i hans sovrum. Den fortsätter i en cell där han nekas vård. När han får reda på vad han är anklagad för blir han chockad. – Varken jag, min mamma eller pojkvän vill bo i Sverige längre, när vi sett den här rasistiska och homofobiska behandlingen av oss, säger Babak Karimi.

Kontext
Unfortunately, the negative effects from companies like Google turning in completely ethical people for doing things that should be completely legal and uncontroversial will do drastically more damage than the positive effects from said companies turning in the poorest of the pedophiles.
Example please

The company is literally building death camps, installing statues of genociders, is run by the RICH pedophiles(who have ZERO interest in seeing pedophiles prosecuted), and is using Palantir and Flock cameras to monitor everything, meanwhile having secret police disappear people and just openly slaughter them.

The United States Government is well beyond deserving the benefit of the doubt.

Great do you have a single example of what you’re claiming, lol. Google turning in a perfectly ethical person for doing something that should be legal and uncontroversial.

You’re moving the goal posts and changing your argument.

Try reading the thread

www.cbc.ca/lite/story/9.7115031

Google tipped off authorities to illicit images in Canadian doctor's account, search warrants say

CBC Lite

I am so confused. Did you read the article that you posted??? Are you just straight up defending pedophilia and rape?

The Toronto detective alleges that after the alerts were passed to the RCMP and then Toronto police, she looked at three of the images and found they depicted naked prepubescent girls. The images included an explicit sex act and exposed genitals.

depicted who I believe to be David Edward-Ooi Poon without a shirt, taking a selfie of himself while sticking out his tongue over an unconscious adult female," the search-warrant application states. The document goes on to describe the woman in the photo as naked below the waist and wearing a dark-coloured eye mask over her eyes. The detective alleges that that photograph and others she examined appeared to be stored in a folder on the iPhone titled “Girls I Drugged And Raped.”

The images included adult females with breasts and genitals exposed “who appeared to be unconscious,” the ITO says. “The body positioning of the females appeared to be limp and did not significantly change throughout the images taken.” Police allege they found other files on the iPhone that appeared to be “upskirt” images or photographs focusing on the buttocks of females, in folders with names suggesting they were underage girls.

Detectives laid 41 more charges in December including making and possessing child pornography, sexual assault, voyeurism for a sexual purpose and drugging someone to facilitate sexual assault.

Either you can’t read, or you are an incredibly disgusting person.

Nah I copied the wrong link. There’s one about a Swedish dude, but go ahead.

Lol yes I did notice.

“The wrong link”

“There’s one about a Swedish dude”

The gymnastics you’re going through to avoid actually facts is hilarious.

so you skipped reading it both times, huh

I think that you’ve lost the plot. That reply doesn’t even make sense in the context of this conversation.

Yes, I read the article that you linked and which is in the OP in which you believe that someone who drugs and rapes people is an ethical person acting legally.

Could you please fly to a different country, retake basic kindergarten to grade 12 education, and then rejoin this conversation once you’ve acquired the skills to make logical and informed arguments. Thanks.

you’re seeing red because the conversation is about a child abuser. you cannot think straight. someone posts a link and oopsie poopsie they copy the one from the top of the conversation instead of the bottom and now you want to deport them. Fucking nazi.

You posted one link. lmao, thinking I’m seeing red yet you start calling people nazi’s because you don’t know how to use a computer.

I haven’t said shit. You are a fucking nazi.

The pinnacle of intelligent discourse.

Oh gosh I copied the wrong link
Let Me DuckDuckGo That For You - LMDDGTFY

Lol

“Do your own research”

Ok Karen sure. It’s up to me to prove other peoples random claims that they make on social media. Um no.

Yes, but also it’s the 4th result on that page

Yea I have zero issue with the fact that accounts with pictures of children’s genitals on them should be referred to the the authorities.

If people want privacy, host the pictures locally.

When you’re storing images with a cloud provider. They become responsible for the images that they store. If it’s a photo of a child’s genitals and that’s illegal for them to have those images on their servers and they need to protect themselves.

Ah, this is probably my fault.

I’m not the person you were replying to so i wasn’t really arguing any of these points, i just a saw the request and knew of an example, so i provided it.

Just in case this was for me specifically I’ll answer:

Yea I have zero issue with the fact that accounts with pictures of children’s genitals on them should be referred to the the authorities.

Pictures of children’s genitals aren’t inherently CSAM, there are plenty of parents and family members with entirely innocent pictures of their kids on their phones.

There are examples of this in the reported cases of false positives leading to bad outcomes, this is easily searchable.

I’m not saying to not do anything, I’m saying blanket reporting is an ineffective brute-force approach.

If people want privacy, host the pictures locally.

In theory yes, in practice, not so much.

on-device scanning exists and is in use/has been in use on phones, examples of this are also easily searchable.

When you’re storing images with a cloud provider. They become responsible for the images that they store. If it’s a photo of a child’s genitals and that’s illegal for them to have those images on their servers and they need to protect themselves.

The need for legal protection is valid, scanning cloud uploaded photo’s is a user privacy nightmare, but expected.

End to end encryption (where only the users device can decrypt and see the photo) would probably stand up legally but then they wouldn’t be able to use the cloud photo’s to make money.

The problem comes with the recognition of illegal and the way it’s handled.

the generated thumbnails of images on your PC

So the precursor to Recall?

Was a gay guy here in Sweden who got assaulted and kidnapped by masked police because some American company had found CSAM on his account while crawling through Yahoo email.

Only it wasn’t CSAM, the photos depicted the man’s 30 year old twinky boyfriend.

No restitution. No police were punished for assaulting a suspect proved innocent. The man and his boyfriend both were humiliated.

I’ve no mixed feelings about it. Spying through private data is entirely unforgivable. There are plenty of pesos out there who get caught and nothing happens anyway. They don’t need to violate innocent people’s privacy to do their job.

Like if the ends justify the means you can end all suffering in the world by just nuking everything. All problems solved.

Oh gods now you have me worried. 20 years ago I was a hundred pounds lighter and just a bag of skin holding a skeleton. There are some photos of me on my Google account that skinny. (also in your medical textbooks but anyways) and I also have photos of me now. We look like completely different people.
never too late to use another service to back up your photos! ente is a good alternative, i personally use proton drive (it’s kind of a crappy interface and not nearly as good as google, but it works). if you’re at all curious about self hosting, immich is basically a 1:1 google photos replacement.
google is our offsite backup. i’ve got a decent onsite already.
i feel you, i still have all my old photos from 2020 and before on google photos. the google takeout function didn’t even work for me, nearly half my photos were missing, so i have to manually download them i suppose. i get anxious still having so much stuff on there, but it’s so hard to migrate off especially after using it for a decade!
i’ve still got to ensure all my photos are off my last phone and on both backups (and that’s important because my dad died when i had that phone) and then make sure all the current phones and photos are backed up, and then make sure the current compy’s documents are backed up and i can try installing mint!

If you care about encryption I’d recommend Ente. They have guides for migrating from Google Photos.

I was initially just doing local backups but I decided I wanted something offsite and Ente has been great.

Import from Google Photos

Migrating your existing photos from Google Photos to Ente Photos

Ente Help
In EU it’s straight out forbidden
looking at account images or pedophilia?
Both
Reasonable pair of laws, just as I’d expect from them
Anyone with the public trust of dealing with patients needs to be scrutinized.
I don’t disagree with that. but the feels like propaganda to destroy privacy and encourage a total surveillance state.

In the US companies(where the company is located last I knew) are legally mandated to report specific things such as CSAM and other things if they come across it.

What the issue should be isn’t the fact that they are reporting it, the issue should be they have the capability to see it in the first place to be able to report it.

This isn’t me defending CSAM or anything like that but, in a decent storage system, google shouldn’t be able to even see what you have, let alone what the images actually are.

They not only look at your files but will decrypt any encrypted zip files to see what you have.

news.ycombinator.com/item?id=37086814

Google has marked my website as harmful for a file that does not exist | Hacker News

That seems less like them decrypting encrypted archives and more like the zip format not encrypting filenames so they’re easily read from the zip’s metadata.

Which is still a privacy violation, to be clear, but not nearly on the same scale as somehow obtaining and using your passwords.

That was what someone claimed but it isn’t true. Filenames are not accessible in an encrypted zip.
They are visible, you can test yourself. Open an encrypted zip with 7zip and it’ll show the file list even without entering a password. The “encrypt file names” checkbox doesn’t even appear when creating an archive if the zip format is selected, so I’m not sure the format even supports it.

it depends on the type of zip encryption, the default doesn’t encrypt metadata

edit: upon looking into it further, the other commenter is right, the zip format itself doesn’t actually support encrypting metadata at all, you would need to use a different format such as 7z to obtain it.

Today it’s for CSAM. Tomorrow it could be for saying anything negative about dear leader. Our Constitution clearly won’t protect us.
Not to get too pedantic, but dammit I just got off the phone with a lawyer. The constitution itself never did anything directly to the public. It outlines the powers given to and withheld from the main branches of the federal government of the US. Those branches empower the agencies that you expect to protect you