I'm wondering how they got ahold of the images from which the hashes were generated. I assume actual images were required, unless there's something I'm missing. I wonder if there's an legal angle to exploit there, e.g. the hash list can't be copyrighted.