Connect with us

Published

on

“a slippery slope of unintended consequences” — Apple details reasons to abandon CSAM-scanning tool, more controversy ensues Safety groups remain concerned about child sexual abuse material scanning and user reporting.

Lily Hay Newman, wired.com – Sep 2, 2023 10:33 am UTC EnlargeLeonardo Munoz/Getty reader comments 181 with

In December, Apple said that it was killing an effort to design a privacy-preserving iCloud photo scanning tool for detecting child sexual abuse material (CSAM) on the platform. Originally announced in August 2021, the project had been controversial since its inception. Apple first paused it that September in response to concerns from digital rights groups and researchers that such a tool would inevitably be abused and exploited to compromise the privacy and security of all iCloud users. This week, a new child safety group known as Heat Initiative told Apple that it is organizing a campaign to demand that the company detect, report, and remove child sexual abuse material from iCloud and offer more tools for users to report CSAM to the company.

Today, in a rare move, Apple responded to Heat Initiative, outlining its reasons for abandoning the development of its iCloud CSAM scanning feature and instead focusing on a set of on-device tools and resources for users known collectively as Communication Safety features. The company’s response to Heat Initiative, which Apple shared with WIRED this morning, offers a rare look not just at its rationale for pivoting to Communication Safety, but at its broader views on creating mechanisms to circumvent user privacy protections, such as encryption, to monitor data. This stance is relevant to the encryption debate more broadly, especially as countries like the United Kingdom weigh passing laws that would require tech companies to be able to access user data to comply with law enforcement requests. Advertisement

Child sexual abuse material is abhorrent and we are committed to breaking the chain of coercion and influence that makes children susceptible to it, Erik Neuenschwander, Apple’s director of user privacy and child safety, wrote in the company’s response to Heat Initiative. He added, though, that after collaborating with an array of privacy and security researchers, digital rights groups, and child safety advocates, the company concluded that it could not proceed with development of a CSAM-scanning mechanism, even one built specifically to preserve privacy.

Scanning every users privately stored iCloud data would create new threat vectors for data thieves to find and exploit,” Neuenschwander wrote. “It would also inject the potential for a slippery slope of unintended consequences. Scanning for one type of content, for instance, opens the door for bulk surveillance and could create a desire to search other encrypted messaging systems across content types.

WIRED could not immediately reach Heat Initiative for comment about Apple’s response. The group is led by Sarah Gardner, former vice president of external affairs for the nonprofit Thorn, which works to use new technologies to combat child exploitation online and sex trafficking. In 2021, Thorn lauded Apple’s plan to develop an iCloud CSAM scanning feature. Gardner said in an email to CEO Tim Cook on Wednesday, which Apple also shared with WIRED, that Heat Initiative found Apple’s decision to kill the feature disappointing.

We firmly believe that the solution you unveiled not only positioned Apple as a global leader in user privacy but also promised to eradicate millions of child sexual abuse images and videos from iCloud, Gardner wrote to Cook. I am a part of a developing initiative involving concerned child safety experts and advocates who intend to engage with you and your company, Apple, on your continued delay in implementing critical technology Child sexual abuse is a difficult issue that no one wants to talk about, which is why it gets silenced and left behind. We are here to make sure that doesnt happen. Advertisement

Apple maintains that, ultimately, even its own well-intentioned design could not be adequately safeguarded in practice, and that on-device nudity detections for features like Messages, FaceTime, AirDrop, the Photo picker are a safer alternatives. Apple has also begun offering an application programming interface (API) for its Communication Safety features so third-party developers can incorporate them into their apps. Apple says that the communication platform Discord is integrating the features and that app makers broadly have been enthusiastic about adopting them.

We decided to not proceed with the proposal for a hybrid client-server approach to CSAM detection for iCloud Photos from a few years ago, Neuenschwander wrote to Heat Initiative. We concluded it was not practically possible to implement without ultimately imperiling the security and privacy of our users.

On Heat Initiative’s request that Apple create a CSAM reporting mechanism for users, the company told WIRED that its focus is on connecting its vulnerable or victimized users directly with local resources and law enforcement in their region that can assist them rather than Apple positioning itself as a middle man for processing reports. The company says that offering this intermediary service may make sense for interactive platforms like social networks.

The need to protect children from online sexual abuse is urgent, though, and as these concerns intersect with the broader encryption debate, Apple’s resolve on refusing to implement data scanning will continue to be tested.

Read the full exchange between Heat Initiative and Apple at WIRED. WIRED has redacted sensitive personal information for the privacy of senders and recipients.

This story originally appeared on wired.com. reader comments 181 with Advertisement Channel Ars Technica ← Previous story Next story → Related Stories Today on Ars

Continue Reading

UK

Killer of MP Sir David Amess was ‘exited’ from Prevent ‘too quickly’, review finds

Published

on

By

Killer of MP Sir David Amess was 'exited' from Prevent 'too quickly', review finds

The man who killed Conservative MP Sir David Amess was released from the Prevent anti-terror programme “too quickly”, a review has found.

Sir David was stabbed to death by Islamic State (ISIS) supporter Ali Harbi Ali during a constituency surgery at a church hall in Leigh-on-Sea in October 2021.

The killer, who was given a whole-life sentence, had become radicalised by ISIS propaganda and had been referred to the anti-terror programme Prevent before the attack.

Politics latest: PM and Badenoch in rare agreement over judge’s decision on Gazan refugees

His case had been closed five years before, after just one meeting for coffee at a McDonald’s to deal with his interpretation of “haram” (forbidden under Islamic law), as well as texts and calls with an “intervention provider”.

Despite Prevent policy and guidance at the time being “mostly followed”, his case was “exited too quickly”, security minister Dan Jarvis told the House of Commons on Wednesday.

Following the publication of a review into Prevent’s handling of Southport child killer Axel Rudakubana earlier this month, Mr Jarvis said a Prevent learning review into Sir David’s killing would be released this week in a commitment to transparency over the anti-terror programme.

Matt Juke, head of counter-terrorism policing, said it is clear the management and handling of Ali’s case by Prevent “should have been better” and it is “critical” the review is acted on “so that other families are spared the pain felt by the loved ones of Sir David”.

Undated handout file photo issued by the Metropolitan Police of Ali Harbi Ali who will be jailed for life at the Old Bailey on Wednesday when he is sentenced for the murder of Sir David Amess, the Conservative MP for Southend West during a constituency surgery in Leigh-on-Sea in Essex, on October 15, 2021 Issue date: Wednesday April 13, 2022.
Image:
Ali Harbi Ali was referred to Prevent twice before he stabbed Sir David to death. Pic: Met Police

The review found:

• Ali was referred to Prevent in 2014 by his school after teachers said his demeanour, appearance and behaviour changed from a previously “engaging student with a bright future” with aspirations to be a doctor to failing his A-levels and wanting to move to a “more Islamic state because he could no longer live among unbelievers”

• Prevent quickly took his case on and he was referred to Channel, part of the programme that aims to prevent involvement in extremism

• He was “exited from Prevent too quickly”, Mr Jarvis said, just five months later “after his terrorism risk was assessed as low”

• A review by police 12 months after he was released from Prevent “also found no terrorism concerns” and the case was closed. This was not uploaded for eight more months due to an “IT issue”

• People released from Prevent are meant to have a review at six and 12 months

• The assessment of Ali’s vulnerabilities “was problematic and outdated” as it did not follow the proper procedure, which led to “questionable decision-making and sub-optimal handling of the case”

• Ali’s symptoms were prioritised over addressing the underlying causes of his vulnerabilities – and support provided did not tackle those issues

• Record keeping of decisions, actions and rationale was “problematic, disjointed and lacked clarity”

• The rationale for certain decisions was “not explicit”

• Ali’s school was not involved in discussions to help determine risk and provide appropriate support – they were only called once to be told the “matter was being dealt with”

• A miscommunication led to only one intervention session being provided, instead of two.

Read more:
Sir David Amess’ daughter taking legal action

Please use Chrome browser for a more accessible video player

Is the Prevent programme fit for purpose?

The review found most of the failures in Ali’s case would not be repeated today as the guidance and requirements are much clearer.

It said referrers, in Ali’s case his school, are kept informed and engaged, and different departments and agencies – not just police – have clear roles.

Which records need to be kept is now clear and guidance for detecting underlying vulnerabilities has changed and would have made a difference, the review added.

It said a Prevent “intervention provider” met Ali at a McDonald’s to deal with his understanding of “haram” (forbidden under Islamic law).

No risk assessment was made but they suggested one more meeting, however a breakdown in communication between the police and the provider meant there were no more meetings.

Training for providers is “substantially different” now and the review says this would not be repeated today, with the provider in question saying the process is “a completely different one today”.

However, the review said there are still problems – not just in Ali’s case – with the Vulnerability Assessment Form, an “incredibly complex document that is vital to Channel” and the progression of a case.

David Amess. Pic: Penelope Barritt/Shutterstock
Image:
David Amess. Pic: Penelope Barritt/Shutterstock


It also found a more recent decision by the College of Police to only hold Prevent case data for five years “may prove to be problematic” and if Ali’s case material had been deleted under that ruling “it would have been nigh on impossible to conduct this review”.

Sir David’s daughter, Katie Amess, 39, last week welcomed the announcement to publish a review into Ali’s case but said every victim failed by Prevent deserves an inquiry, not just the Southport victims.

“We potentially wouldn’t be in the same situation today with repeat failings of Prevent had somebody had just listened to me back when it [her father’s killing] happened and launched a full public inquiry,” she told LBC.

Ms Amess said she believes if the Southport attack had not happened, the review into Prevent’s handling of her father’s killer would never have been released into the public domain.

Continue Reading

UK

Nottingham NHS trust fined £1.6m over ‘catalogue of failures’ that led to deaths of babies

Published

on

By

Nottingham NHS trust fined £1.6m over 'catalogue of failures' that led to deaths of babies

An NHS trust has been fined £1.6m after admitting it failed to provide safe care and treatment to three babies who died within days of their births.

The Care Quality Commission (CQC) had charged Nottingham University Hospitals (NUH) NHS Trust over the deaths, which all occurred in 2021.

The trust pleaded guilty to six charges of failing to provide safe care and treatment to the three children and their mothers at Nottingham Magistrates’ Court on Monday.

The charges were in connection to the deaths of Adele O’Sullivan, who was 26 minutes old when she died on 7 April 2021, four-day-old Kahlani Rawson, who died on 15 June 2021, and Quinn Parker, who was one day old when he died on 16 July 2021.

District Judge Grace Leong told the hearing, which was attended by the trust’s chief executive since September 2022 Anthony May, that the “catalogue of failures” in the trust’s maternity unit were “avoidable and should never have happened”.

Family members cried in the courtroom as the judge expressed her “deepest sympathy” to each of them and said the trust they put in NUH to deliver their babies safely had been broken.

“The death of a child is a tragedy beyond words, and where that loss is avoidable the pain is even more profound,” she said.

“Three-and-a-half years have gone by, yet for the families no doubt their grief remains as raw as ever and a constant presence in their lives that is woven into every moment.

“The grief of a baby is not just about the past, it is about the future that is stolen. It is a lifetime of missing first words, first steps, first days of school, missing memories that should have been made.

“It is very difficult, if not impossible, to move on from the failures of the trust and its maternity unit.

“The weight of what should have been done differently will linger indefinitely.”

‘Systematic failures’

District Judge Leong highlighted concerns over a lack of escalation of care, an inadequate communications system and a failure to provide “clear and complete” information sharing.

She said: “I accept there were systems in place but there were so many procedures where guidance was not followed or adhered to.

“The failures in combination amounted to systematic failures in the provision of care and treatment.”

The trust has an average turnover of £612m, but District Judge Leong said she was “acutely aware” that all its funds as a publicly funded body were accounted for and that the trust is currently operating at a deficit of around £100m.

“I can’t ignore the negative impact this will have… but the significant financial penalty has to be fixed to mark the gravity of these offences and hold the trust to account for their failings,” the judge said.

Read more:
Wrexham player in car crash after cup game
Man charged with murder of ‘much-loved’ mum
RuPaul’s Drag Race star died of ‘unnatural’ cause

The £1.6m fine was broken down into £700,000 related to the death of Quinn Parker, £300,000 each for the deaths of Adele O’Sullivan and Kahlani Rawson, and three amounts of £100,000 related to the care provided to each of the mothers.

Lawyers acting on behalf of the trust told the families in court they offered their “profound apologies and regrets” and that improvements have been made, including hiring more midwives and providing further training to staff.

‘Contemptuous and inhumane’

The court was told that one of the pregnant women, Emmie Studencki, went to the hospital four times suffering bleeding before her son Quinn was born.

On the final occasion before Quinn was born, Ms Studencki called an ambulance at around 6.15am on 14 July 2021 with paramedics estimating she had lost around 1.2 litres of blood both at home and in the ambulance on the way to City Hospital.

Despite this, the paramedics’ observations did not “find its way into the hospital’s notes”, with staff only recording a 200ml blood loss.

Quinn was “pale and floppy” when he was born via emergency Caesarean section that evening, and despite several blood transfusions, he was pronounced dead after suffering multiple organ failure and lack of oxygen to the brain.

An inquest concluded it was a “possibility” he would have survived had a Caesarean section been carried out earlier.

In a statement, Ms Studencki said the trust’s treatment of her, her son, and her partner Ryan Parker had been “contemptuous and inhumane”.

‘We lost our beautiful daughter’

Adele O’Sullivan died 26 minutes after being born following an emergency Caesarean at 29 weeks in April 2021, the court also heard.

Her mother Daniela had noticed bleeding and suffered abdominal pain but in a victim impact statement said she was left “screaming in pain” with no painkillers. Despite having a high-risk pregnancy, she was not examined for eight hours before Adele was born.

Adele was born in “poor condition” and a decision was made to withdraw care, with a post-mortem examination finding she died as a result of severe intrapartum hypoxia.

Daniela said: “People who were supposed to help me did not help but harmed me mentally and physically forever.

“We lost our beautiful daughter. Instead of bringing her home I had to leave the labour suite empty-handed in a lot of physical and mental pain.”

The trust also admitted liability in another case involving mother Ellise Rawson, who had reported abdominal pain and reduced foetal movements. She was delayed in receiving an emergency Caesarean section in June 2021. Her son Kahlani suffered a brain injury and died four days later.

Kahlani’s grandmother Amy Rawson told the court that her grandson’s death was a “preventable tragedy” that had left the family “devastated, broken and numb”.

This case is the second time the CQC has prosecuted the trust over failures in maternity care.

It was fined £800,000 for a “catalogue of failings and errors” that led to the death of a baby 23 minutes after she was born at the Queen’s Medical Centre in Nottingham in September 2019.

NUH is also at the centre of the largest maternity inquiry in NHS history, with midwife Donna Ockenden leading the investigation.

In February she confirmed the number of families taking part has increased to 2,032 – forcing a delay to her report’s publication until June 2026.

‘We fully accept the findings’

In a statement released after the hearing, NUH chief executive, Mr May said: “The mothers and families of these babies have had to endure things that no family should after the care provided by our hospitals failed them, and for that I am truly sorry.

“Today’s judgment is against the trust, and I also apologise to staff who we let down when it came to providing the right environment and processes to enable them to do their jobs safely.

“We fully accept the findings in court today and have already implemented changes to help prevent incidences like this from this happening again.”

He added that a CQC report published in September 2023 showed there had been an improvement in the overall rating for the trust’s maternity services.

Helen Rawlings, CQC’s director of operations in the Midlands, said in a statement after the sentencing: “The care that these mothers received, and the death of these three babies is an absolute tragedy and my thoughts are with their families and all those grieving their loss under such sad circumstances.

“All mothers have a right to safe care and treatment when having a baby, so it’s unacceptable that their safety was not well managed by Nottingham University Hospitals NHS Trust.

“The vast majority of people receive good care when they attend hospital, but whenever a registered health care provider puts people in its care at risk of harm, we seek to take action to hold it to account and protect people.

“This is the second time we have prosecuted the trust for not providing safe care and treatment in its maternity services, and we will continue to monitor the trust closely to ensure they are making and embedding improvements so that women and babies receive the safe care they deserve.”

Continue Reading

Environment

Genesis is reportedly launching a luxury G70 EV sports sedan — Here’s what we know so far

Published

on

By

Genesis is reportedly launching a luxury G70 EV sports sedan — Here's what we know so far

Word on the street is the Genesis G70 is going all-electric. The luxury sports sedan is due for a complete overhaul, including a new look and a fully electric powertrain. Here’s what we know about the Genesis G70 EV so far.

Is Genesis launching a G70 EV sports sedan?

Hyundai’s luxury Genesis brand already offers three fully electric vehicles (EVs): the GV60, the Electrified GV70 SUV, and the Electrified G80 sedan.

This year, all are getting significant updates, including a longer driving range, a refined interior and exterior design, and even more luxury.

Genesis isn’t stopping here. The luxury automaker has even bigger plans in the works. According to Korea’s MotorsJason, the luxury sports sedan will be completely redesigned. The report claims the next-gen Genesis G70 will be exclusively sold as an EV model.

After the Kia Stinger GT1 EV project was put on hold, its launch was finally confirmed. Now, attention has shifted to its sibling, the Genesis G70.

Although the G70 was reportedly being discontinued, and plans for a hybrid were also scrapped, Genesis could revive it as an EV to attract younger buyers to the brand.

Genesis-G70-EV
Genesis Track Taxi Nordschleife models including the GV70, G70, Electrified G80, and GV60 (Source: Genesis)

The electric G70 could even earn a Magma performance model. The company’s product planning director said the G70 is an important car for younger buyers to experience the Genesis brand. He explained that the model’s future is being discussed every day on a global level, adding there’s still hope for the G70.

At 4,685 mm (184.4″) long, the 2025 Genesis G70 is about the size of a Tesla Model 3 (4,720 mm/ 185.8″). However, the electric G70 is expected to be slightly smaller and sportier. It’s expected to fill the gap with the Audi A5 coupe and convertible being discontinued.

Genesis-G70-EV
Genesis G70 Track Taxi Nordschleife model (Source: Genesis)

Like the GV90, its upcoming ultra-luxury electric SUV, the G70 EV will ride on Hyundai’s new eM platform, which will replace the current E-GMP.

Genesis is expected to unveil the GV90 by the end of the year (Here’s a look at it after it was spotted for the first time in South Korea). With the G70 EV still under development, it’s not likely to arrive until 2027 or 2028. Prices are expected to start at around 70 million won in Korea, or just under $50,000. Check back for more details soon.

Would you buy the electric Genesis sports sedan for around $50,000? Let us know what features you would want to see in the comments below.

Source: TheKoreanCarBlog, MotorsJason

FTC: We use income earning auto affiliate links. More.

Continue Reading

Trending