news Canada Child Protect caught spreading child porn using AWS services

[SenSnowy]

Today “SauceNao”, a popular reverse image search engine to find the name of an anime or manga from a single panel, called out Canadian child services. The Twitter account tweeted that it caught Canadian child protect on multiple occasions uploading pedophilia material on its services to search for it. The service has disabled cached static content but since CCP is using a bot to upload those images as temp material to be looked for and finding those images on the database of the service itself. The bot the CCP is using seems to be based on AWS, which would mean these pedophile materials are on Amazon’s servers as well, even if only cached. This could be a dangerous play for AWS as holding any pedophilia material is illegal in almost every country. 

The CCP has not yet responded to either emails or Twitter. 
 

Summary

 Canadian child services using reverse images websites to find pedophilia content by uploading the materials itself on to other servers.  

 

Quotes

Quote

 Hey, @CdnChildProtect since you ignored my email last week, would you please stop searching for child porn on our service and then reporting the temporary images you uploaded? YOU ARE DIRECTLY SPREADING THE ABUSE MATERIAL! THIS MUST STOP NOW!

 

My thoughts

 Deleting this because the forum members rather focus on my own take than the issue being that the Canadian Child Protect has been caught spreading pedophilia material using a poorly coded bot.. 

 

Sources

 

 https://twitter.com/saucenao/status/1379217839974973441?s=21

https://twitter.com/saucenao/status/1379219008545767426?s=21

 

https://twitter.com/saucenao/status/1379220475465846784?s=21
 

 

 

https://saucenao.com

Edited April 6, 2021 by SenSnowy

[SenSnowy]

First time uploading this kind of news. Hope it gets the reach for it to be stopped. Sorry mods if I did mistakes. 

[Colty]

I'm not sure how big of trouble Amazon could get in. They are renting/leasing the server space. I don't think BMW would be sued for a leased car having cocaine in it, but I'm not sure how this would differ, especially in Canada. 

They seem especially active on Twitter so hopefully this will get their attention. We should all tweet them until this is corrected. 

[givingtnt]

I doubt anyone could find AWS to be even remotely responsible. How could they not have reasonably trusted CCP ?
But then again, I guess they shouldn't. That's gotta be the dumbest thing I ever read.

[SenSnowy]

1 minute ago, Colty said:

I'm not sure how big of trouble Amazon could get in. They are renting/leasing the server space. I don't think BMW would be sued for a leased car having cocaine in it, but I'm not sure how this would differ, especially in Canada. 

They seem especially active on Twitter so hopefully this will get their attention. We should all tweet them until this is corrected. 

Yeah you might be right but the question is here if governments will care who uploaded it or that they didn’t filter this out in the first place. Leasing companies are still responsible for illegal activities done with their property. 
And yes to tweeting them and get to stop this ! i hope ltt picks it up for short circuit or wan show to spread it and increase pressure on CCP. 

[SenSnowy]

2 minutes ago, givingtnt said:

I doubt anyone could find AWS to be even remotely responsible. How could they not have reasonably trusted CCP ?
But then again, I guess they shouldn't. That's gotta be the dumbest thing I ever read.

They provided the service and servers. You are still responsible for the data and material on your own property. Same with cloudfare and megacloud. And megacloud was found guilty of helping spread pedophile material cause it didn’t filter and fight it on their servers 

[poochyena]

40 minutes ago, SenSnowy said:

Mega Upload was found guilty for having DMCA content on their servers and services without filtering.

Mega got in trouble for knowing about the illegal content and doing nothing about it. Not for just simply hosting it.

[givingtnt]

19 minutes ago, SenSnowy said:

They provided the service and servers. You are still responsible for the data and material on your own property. Same with cloudfare and megacloud. And megacloud was found guilty of helping spread pedophile material cause it didn’t filter and fight it on their servers 

There's a key difference.
Knowing and not acting is very much guilty.
Not knowing and realizing something is wrong, then making it public that they are doing this is different.

Here's an example:
IF I were to post child pornography on the forum, would that make LMG guilty of helping me spread material ?
Of course not.

But if say, they knew it and just let it happen by turning a blind eye.. now that's actually something they could be found guilty of.

[StDragon]

20 minutes ago, SenSnowy said:

They provided the service and servers. You are still responsible for the data and material on your own property. Same with cloudfare and megacloud. And megacloud was found guilty of helping spread pedophile material cause it didn’t filter and fight it on their servers 

That's a nebulous argument. The only way to proactively prevent any uploading of illegal content is vetting with a human being. That means kiss cloud storage via DropBox and OneDrive goodbye.

 

Maybe that's the point via poisoning the service?

[TetraSky]

Oh I saw this earlier on twitter.

Disgusting that they are the ones spreading it, only to then report it to pretend that they just "found it" there. They are essentially trying to justify their job, by spreading it themselves so that it will look good on their monthly report or whatever.

[EricX2]

26 minutes ago, SenSnowy said:

They provided the service and servers. You are still responsible for the data and material on your own property. Same with cloudfare and megacloud. And megacloud was found guilty of helping spread pedophile material cause it didn’t filter and fight it on their servers 

So what stops a competitor of Amazon (or anybody) from uploading content and then reporting it anonymously if it's the host that gets the blame?

[BuckGup]

Nothing will happen and no one will be charged. The United States Government is even better at spreading CP. They'll seize a site on the deepweb and then upgrade the infrastructure to accommodate more users and continue to operate the site. They got called out a bit ago after they were found to be hosting CP for years. 

[Demonking]

10 minutes ago, BuckGup said:

Nothing will happen and no one will be charged. The United States Government is even better at spreading CP. They'll seize a site on the deepweb and then upgrade the infrastructure to accommodate more users and continue to operate the site. They got called out a bit ago after they were found to be hosting CP for years. 

I remember that, they said it was to continue to catch more predator's going to the site, and other stuff.

[cj09beira]

in contrast to the last case "similar" to this where a government was HOSTing a CP site on the darkweb to try and get the owner that went to australia to "film" once a year (i could be remembering it wrong), i don't see much wrong with this, they are using image search to search for it, its not like they are hosting or spreading anything unless you have access to the temp cache of SauceNao which people dont.

[cj09beira]

5 minutes ago, Demonking said:

I remember that, they said it was to continue to catch more predator's going to the site, and other stuff.

if i remember right they had the site but couldn't get who made / uploaded content so they were waiting to try and getting the guy, the problem is that involved another child being raped.

overall quite a different case.

[BuckGup]

23 minutes ago, Demonking said:

I remember that, they said it was to continue to catch more predator's going to the site, and other stuff.

Yup and the best part is if you call them out you will be instantly labeled as a pedophile 

[WkdPaul]

2 hours ago, cj09beira said:

in contrast to the last case "similar" to this where a government was HOSTing a CP site on the darkweb to try and get the owner that went to australia to "film" once a year (i could be remembering it wrong), i don't see much wrong with this, they are using image search to search for it, its not like they are hosting or spreading anything unless you have access to the temp cache of SauceNao which people dont.

They do have access to their own temp cache, what they're doing is they upload a picture for a reverse search, that upload gets shown in the result, and then they report it as CP.

 

SauceNao has turned that feature off solely because of that bot Canadian child services is running.

 

Not sure if it's incompetence of they're trying to artificially inflate their numbers.

[Bombastinator]

8 hours ago, SenSnowy said:

Today “SauceNao”, a popular reverse image search engine to find the name of an anime or manga from a single panel, called out Canadian child services. The Twitter account tweeted that it caught Canadian child protect on multiple occasions uploading pedophilia material on its services to search for it. The service has disabled cached static content but since CCP is using a bot to upload those images as temp material to be looked for and finding those images on the database of the service itself. The bot the CCP is using seems to be based on AWS, which would mean these pedophile materials are on Amazon’s servers as well, even if only cached. This could be a dangerous play for AWS as holding any pedophilia material is illegal in almost every country. 

The CCP has not yet responded to either emails or Twitter. 
 

Summary

 Canadian child services using reverse images websites to find pedophilia content by uploading the materials itself on to other servers.  

 

Quotes

 

My thoughts

 Deleting this because the forum members rather focus on my own take than the issue being that the Canadian Child Protect has been caught spreading pedophilia material using a poorly coded bot.. 

 

Sources

 

 https://twitter.com/saucenao/status/1379217839974973441?s=21

https://twitter.com/saucenao/status/1379219008545767426?s=21

 

https://twitter.com/saucenao/status/1379220475465846784?s=21
 

 

 

https://saucenao.com

One other thing is an organization like that is more or less the cops.  One of the hard things about being a cop I understand is the job puts you in contact with the ass end of society.  These people catch pedos and save children, so they’re going to be looking for them and that means they’re going to come into contact with kiddie porn.  It will mostly be evidence or research material to find victims but being able to find kiddie porn in a place like that mostly just says to me they’re doing their job, and the job is both awful and needs to be done. 

[Arika]

the fuck?

[SansVarnic]

-= Topic Moved to Off-Topic =-

Topic was not tech news.

[wasab]

1 hour ago, Bombastinator said:

 they’re doing their job, and the job is both awful and needs to be done. 

Imagine how the Google employees who need to manually view and filter these materials from their search engine feel. 

[Letgomyleghoe]

2 minutes ago, wasab said:

Imagine how the Google employees who need to manually view and filter these materials from their search engine feel. 

not even considering all the other horrible things they likely see, IE suicide videos, murders, etc. etc. you get the picture, horrible shit. I remember seeing something about depression/other mental illness in employees responsible for filtering material on youtube and in the comments and it was like 30% above average.

[Bombastinator]

18 minutes ago, wasab said:

Imagine how the Google employees who need to manually view and filter these materials from their search engine feel. 

Other people seem to be treating the how and why this happened.  

[kasugatei]

When you sign up for AWS you are responsible for the data. If AWS figures out that you use their services for illegal activities they will take action. 
Let’s take traditional datacenter environment for comparison. Some datacenters can lease you rack and networking for your servers. If you put server in there filled with illegal content, whose fault is that? 
AWS is the same thing, it only deals with virtual environments instead of using separate physical servers for each customer’s instance. 

[cj09beira]

6 hours ago, comander said:

I feel like governments spend 100x too many resources trying to find kiddie porn and that those funds should be shifted to preventing its creation. 

 

You know... stopping the actual victimization instead of hunting for people with mental issues (many of whom probably never leave their parents' basement). 

well for you to get the guys making it you first need to know who they are, and have some proof that they done it, so you need to search for the CP first, it be great to find the golden pot without having to find a rainbow first but you cant