Google Detects Cartoon Child Abuse | Log4j Chaos | Facebook Vs. Surveillance-For-Hire

In this week's edition of The Wire In Real Life, I look at how Google deals with child sexual abuse imagery when it doesn't contain real minors, but cartoon and animated material.

Erotic depictions of children are potentially illegal to own under U.S. law and can be detected by Google's anti-child sexual material (CSAM) systems, a fact not previously discussed in the public domain. Google has long acknowledged that its code can look out for child abuse using two technologies. The first uses YouTube-designed software that looks out for "hashes" of previously-known illegal content. Such hashes are alphanumeric representations of a file, meaning a computer can scan files within, for instance, a Gmail email and it'll raise a flag if there's a file with the same hash as the illicit photo or video. Google also uses machine learning tools to look at files and analyze them for any sign they contain CSAM.

It's not clear which of those two technologies were used in Kansas in late 2020, when Google detected “digital art or cartoons depicting children engaged in sexually explicit conduct or engaged in sexual intercourse” within a Drive account. This is according to a search warrant discovered by Forbes, that goes on to detail the graphic images, which included what appeared to be sexually explicit cartoons of underage boys. As per its legal requirements, Google handed information on what it found, as well as the IP addresses used to access the images, to the National Center for Missing and Exploited Children (NCMEC), which then passed on the findings to the DHS Homeland Security Investigations unit. Investigators used the IP addresses to identify the suspect as the alleged owner of the cartoons, and searched his Google account, receiving back information on emails to and from the defendant.

It appears the suspect may actually be a known artist. As no charges have been filed, Forbes isn’t publishing his name, but a Google search for that name and a small town in Kansas, where the suspect was identified as living, showed an artist who had previously won some small, local competitions. His artwork also picked up headlines on the West Coast in the 1990s.

The law around cartoon imagery is worded so as to provide some degree of protection for anyone owning or sharing animations of children engaging in sexual conduct for the sake of art or science. A prosecutor trying to convict anyone possessing such material would have to prove that the CSAM was “obscene” or that it “lacks serious literary, artistic, political, or scientific value.”

Google, meanwhile, has in recent years released transparency reports showing how many times it reports issues to NCMEC. The figures reveal a disturbing trend. In the first six months of 2021, it found more than 3.4 million pieces of potentially illegal content in 410,000 separate reports. That was up from 2.9 million in 365,000 reports in the last six months of 2020, and well over double that from January to June 2020, when 1.5 million pieces of CSAM material were discovered and reported to NCMEC in 180,000 reports. 

At the time of publication, Google hadn’t provided comment on the cartoon case and how it detects animated imagery in Google accounts.

Given the recent furore over how Apple planned to scan iPhone images for CSAM, a move it ended up delaying after criticism that it was compromising user privacy, the spotlight has been turned on how other tech giants deal with the issue. As Google doesn't end-to-end encrypt its communications tools like Gmail or its file storage tech like Drive, it's still possible for the tech company to scan for illegal content. And as it has no plans to introduce those features, law enforcement can still rely on Google to warn NCMEC when potential abuse happens on its servers.

Whether the majority of users will want Google to scan people's accounts so it can help find child abusers, or have improved privacy with end-to-end encryption instead, the Mountain View, California-based business will have to struggle with that balance in perpetuity. The same goes for any one of its rivals. 

A version of this story will go up on
Forbes later today.

If you have any tips on government surveillance or cybercrime, drop me an email on
tbrewster@forbes.com or message me on Signal at +447782376697.

Thomas Brewster

Thomas Brewster

Associate Editor, Cybersecurity

The Big Story

Facebook Warns 50,000 Users Were Targeted By Spy-For-Hire Companies
 
 
 
Facebook Warns 50,000 Users Were Targeted By Spy-For-Hire Companies

Meta warns of “indiscriminate” targeting of “everyday people,” as it continues its fight against the spyware industry. And it's not NSO making the headlines this time.

Read The Full Story →

The Stories You Have To Read Today

On the same day Facebook fired back at spyware vendors, Citizen Lab researchers revealed a former Egyptian presidential candidate and a friend of murdered journalist Jamal Khashoggi had allegedly been hacked by both NSO Group technology and that of little-known entity Cytrox. I interviewed Nour and heard about his fears he was in genuine danger because of the hacks. (NSO claimed the Citizen Lab report was false.)

Talking of NSO, it's reportedly considering a sale or a complete shutdown of its Pegasus spyware business in light of actions by the U.S. Commerce Department, which banned American companies from working with the Israeli company without the right license.

A vulnerability in widely-used app logging code known as Apache Log4J is being widely exploited and dubbed one of the most dangerous software flaws in recent memory. All federal agencies are now required to address the issues.

We may finally know why Huawei is persona non grata in the U.S. and elsewhere: a Bloomberg report citing multiple intelligence sources claimed that Chinese hackers breached an Australian telecoms provider via "a software update from Huawei that was loaded with malicious code."

Winner Of The Week

It might be in the middle of copyright litigation with Apple, but Floridian startup Corellium announced a $25 million funding round. None of the funds from Paladin Capital and Cisco Investments will be going on Corellium’s copyright fight with Apple, as the startup looks to expand.

Loser Of The Week

A 63-year-old defense contractor, John Murray Rowe Jr, allegedly sent hundreds of messages to undercover FBI agents, believing they were Russian government officials. He was caught handing over information about electronic countermeasure systems used by American military fighter jets, according to the Justice Department.

Forbes

You’ve received this email because you’ve opted in to receive Forbes newsletters.

Unsubscribe from The Wiretap.

Manage Email Preferences | Privacy

Forbes Media | 499 Washington Blvd.

Jersey City, NJ 07130

Older messages

What Does Joe Manchin Want? | Elon & The IRS | America’s Top Charities

Monday, December 20, 2021

Plus: Airbnb's $10 Billion Engineer Is Tackling The Lodging Giant's Toughest Projects ADVERTISEMENT Forbes Good morning. The White House and Democrats are again left puzzling over whether Joe

Last chance saloon 🥃

Monday, December 20, 2021

CryptoCodex Forbes Billy Bambrough Forbes Senior Contributor Forbes Good Monday morning. This is Billy Bambrough with the latest from crypto-land and what to look out for this week. Was this newsletter

Reddit, TPG join the IPO bandwagon

Sunday, December 19, 2021

Kevin Dowd Staff Writer December 19, 2021 Big Things Less than two weeks remain in the busiest year in M&A history, and Deal Flow is on the brink of a brief hibernation. This will be the final free

The Best Mattress Discounts & Bedding Sales Right Now: Save $499 At Nectar

Saturday, December 18, 2021

Plus: The Absolute Most Coveted Beauty Gifts For All The Skincare And Haircare Fanatics On Your List All products and services featured are independently selected by Forbes Vetted contributors and

Secondaries Spike In 2021 | Redpoint Has A New Partner | India’s Unicorn Boom

Saturday, December 18, 2021

By Becca Szkutak With reporting from Alex Konrad and Kenrick Cai Howdy! Welcome to Midas Touch. I'm Becca Szkutak and I'm joined by senior editor Alex Konrad and senior reporter Kenrick Cai. In

You Might Also Like

☕ Great chains

Wednesday, January 15, 2025

Prologis looks to improve supply chain operations. January 15, 2025 View Online | Sign Up Retail Brew Presented By Bloomreach It's Wednesday, and we've been walking for miles inside the Javits

Pete Hegseth's confirmation hearing.

Wednesday, January 15, 2025

Hegseth's hearing had some fireworks, but he looks headed toward confirmation. Pete Hegseth's confirmation hearing. Hegseth's hearing had some fireworks, but he looks headed toward

Honourable Roulette

Wednesday, January 15, 2025

The Honourable Parts // The Story Of Russian Roulette Honourable Roulette By Kaamya Sharma • 15 Jan 2025 View in browser View in browser The Honourable Parts Spencer Wright | Scope Of Work | 6th

📬 No. 62 | What I learned about newsletters in 2024

Wednesday, January 15, 2025

“I love that I get the chance to ask questions and keep learning. Here are a few big takeaways.” ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌ ͏ ‌

⚡️ ‘Skeleton Crew’ Answers Its Biggest Mystery

Wednesday, January 15, 2025

Plus: There's no good way to adapt any more Neil Gaiman stories. Inverse Daily The twist in this Star Wars show was, that there was no twist. Lucasfilm TV Shows 'Skeleton Crew' Finally

I Tried All The New Eye-Shadow Sticks

Wednesday, January 15, 2025

And a couple classics. The Strategist Beauty Brief January 15, 2025 Every product is independently selected by editors. If you buy something through our links, New York may earn an affiliate commission

How To Stop Worrying And Learn To Love Lynn's National IQ Estimates

Wednesday, January 15, 2025

... ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏

☕ Olympic recycling

Wednesday, January 15, 2025

Reusing wi-fi equipment from the Paris games. January 15, 2025 View Online | Sign Up Tech Brew It's Wednesday. After the medals are awarded and the athletes go home, what happens to all the stuff

Ozempic has entered the chat

Wednesday, January 15, 2025

Plus: Hegseth's hearing, a huge religious rite, and confidence. January 15, 2025 View in browser Jolie Myers is the managing editor of the Vox Media Podcast Network. Her work often focuses on

How a major bank cheated its customers out of $2 billion, according to a new federal lawsuit

Wednesday, January 15, 2025

An explosive new lawsuit filed by the Consumer Financial Protection Bureau (CFPB) alleges that Capital One bank cheated its customers out of $2 billion. ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏ ͏