← Back to context

Comment by chikere232

1 month ago

As trivia, on mac os, the photoanalysisd service will run in the background and look through your photos, even if you never open Apple Photos. It can't be disabled unless you disable SIP (system integrity protection) which requires a complicated dance of reboots and warnings. It will reenable if you turn SIP back on.

It seems Apple are very passionate about analysing your photos for some reason, regardless if you yourself are.

You may also be shocked to learn that Spotlight looks through every single file on your Mac.

  • I was. First by the md_worker processes that mysteriously started pinning all of my CPU cores after a git clone. Then by the realization that MacOS had built a full-text index of millions of lines of source code (it only took a few hours of my Mac being too hot to touch).

    A lot of Apple's defaults are just plain bizarre. Why the hell is Spotlight seeing source code mimetypes and feeding it to the search index?

  • Local search indexing is somewhat more defendable as a system level service, but yeah, it would be nice if that was also up to me as a user.

CSAM could already be part of some local service theoretically. Privacy ended with a requirement to have an account linked to the device (not just icloud). There is no account needed to use a Linux computer.

Does it phone home? I don't care about scanning my files. I do care about details of my private data leaving my device.

“It seems Apple are very passionate about analysing your photos for some reason, regardless if you yourself are.”

Isn’t this fragile to pollution from end users?

What if we all ran A local Image generator trained on our own photos… But slightly broken… And just flooded their photo hash collection with garbage?

Now what ?

This would be a very good flushing action. Lot would be learned by seeing who got angry about this and how angry they got…

  • No. The analysis in question is fully local, used for indexing photos by categories in the Photos app. It is unrelated to any cloud features and not something shared across users.

    They are also not using your personal photos to feed the location database, most likely public sources and/or Apple Maps data. If they are relying on GPS-tagged public photos alone, you could probably mess up a system like this by spoofing GPS location en-masse and posting them online for years, but for what purpose?

All kinds of nonsense runs and phones home throughout the os. The thing that annoyed me the most is trying to create an account will phone home to apple, such as setting up a local smtp/imap server on the local network.