undefined | Better HN

0 pointsjcun41284y ago0 comments

Dumb question but would an S3 bucket be scanned by CSAM?

Ehh idk seems like a dumb concern/losing battle. My thing is about IP. I picked up this e-ink tablet and it syncs to their cloud service for example. Which you can stop but still... Ahh. Just feels like going in circles, ISP knows your content, VPN, is your device actually secure, etc... Do you have anything to hide anyway.

I'm probably just paranoid ha I question using Trello putting "new IP" into it which they say is encrypted at rest so yeah. Gmail too like everything goes through that.

Anyway I'm average intelligence not developing cold fusion or something on my spare time so I don't really have IP anyway.

Here's an idea, a piece of paper and a pencil.

0 comments

stuaxo4y ago

An s3 bucket will give you back an ETAG header for each file it holds, which is more or less the MD5 of a set of chunks that make up the file.

You can use that to identify files.

orf4y ago

Only if the file is not uploaded via a multipart upload, which all SDKs do for any files larger than a megabyte.

If the object is encrypted with KMS, which almost everything is, then the hash is the encrypted contents and not the original contents.

square_usual4y ago

> Dumb question but would an S3 bucket be scanned by CSAM?

Maybe, but if you E2EE it can't detect anything, anyway. (Please don't take this as an endorsement of child porn) NextCloud has preliminary E2EE support built in, but not for photos - yet.

j / k navigate · click thread line to collapse