Live data from Hacker News

Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

wired.com

151–160 of 407 posts

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#151
I used to think richard stallman was just a paranoid lunatic... Well, the more time goes by, the more i think he was just 100% right. It's time to be much much more careful and radical with the path technology is taking us.

It's time we all invest a bit of our time to provide real open and benevolent alternatives to facebook, google, amazon, and all the rest, because they're steering internet toward an orwelian nightmare.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#152

Earlier quoted context omitted.

What recovery? You're uploading your pic via your account. It is already associated with you.

As I understood it you are making the argument that they will have information about you from uploading this picture even if they delete the actual picture. I'm genuinely asking if it is possible to recover an individual training example from a model which is shown vast amounts of data. I'm only aware of being able to recover stuff like this - https://ars.els-cdn.com/content/image/1-s2.0-S08936080173020... which is h…

The goal is to be able to identify you, not recover an image of you.

This is just as much PII as your fingerprints. Fingerprint based devices store metadata not images. I can't look at a fingerprint and connect it to a person, but a machine can. Similarly the output of a NN designed to recognize people will be useful for validation. Otherwise biometrics would not work.

Remember if they are using your photo as training data the NN is going to learn you vs someone else or it's useless. If they can find you in any photo that's as effective as handing a person the uploaded photo and giving the same task.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#153

>> “Please upload a photo of yourself that clearly shows your face. We’ll check it and then permanently delete it from our servers.” >> To determine if the account is authentic, Facebook looks at whether the photo is unique. I assume this means that the photo itself is deleted but a one-way hash of it created to test against later. However, if I change one pixel of a picture of my face, A, to produce a new picture of…

It doesn't have to be a hash really. They probably use some image processing techniques to process facial features and store the signature.

I'm not sure how it identifies a human from a bot though.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#154

I was recently locked out of my FB account. The only way to unlock it was to identify my friends' pictures. Apparently sending me an e-mail was too much trouble ... Haven't been able to log in since, as I refuse to partake in that sort of bullshit. Can't say I miss it.

You could upload a fake photo to login, delete your content, and then delete your Facebook account.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#155
post #90

Earlier quoted context omitted.

I don't see how that makes it better.

Presumably, you would do this after Facebook already has a copy of the nude -- uploaded by the attacker/malicious ex. If you want Facebook's computers to automatically take down any copies of the photo, yes, you're going to have to trust them with a copy of it. Automated DMCA takedowns of copyrighted music and movies work in very much the same way.

> yes, you're going to have to trust them with a copy of it.

No. They could have you compute a fingerprint locally without uploading the image itself, preferably through some audited open source software, without auto-updates. They only don't do that because they want to guard their image hashing as corporate secrets.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#156

>> “Please upload a photo of yourself that clearly shows your face. We’ll check it and then permanently delete it from our servers.” >> To determine if the account is authentic, Facebook looks at whether the photo is unique. I assume this means that the photo itself is deleted but a one-way hash of it created to test against later. However, if I change one pixel of a picture of my face, A, to produce a new picture of…

Hashes don't necessarily work on the raw bit representation of something. You can have a hash which works on higher level constructs, which for images one solution would be called a perceptual hash.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#157

I uploaded a cropped/mirrored picture of Jack Nicholson in the Shining. After 48 hours the account was working again, no idea what happens in that process.

Well, it's rather disappointing that they didn't catch something as simple as that ;)

It's already nontrivial to create fake Facebook accounts. For those serious about it, who already deal with IPs and mobile numbers, I can't imagine that creating novel photorealistic faces would be all that problematic.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#158

Earlier quoted context omitted.

I'm pretty sure Facebook already has plenty of training data of faces

Excuse me. The issue is biometrics. "We'll delete the picture" =/= "we'll delete the control points and features extracted from your pics".

What do you mean by "control points"?

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#159
post #90

Earlier quoted context omitted.

Presumably, you would do this after Facebook already has a copy of the nude -- uploaded by the attacker/malicious ex. If you want Facebook's computers to automatically take down any copies of the photo, yes, you're going to have to trust them with a copy of it. Automated DMCA takedowns of copyrighted music and movies work in very much the same way.

> yes, you're going to have to trust them with a copy of it. No. They could have you compute a fingerprint locally without uploading the image itself, preferably through some audited open source software, without auto-updates. They only don't do that because they want to guard their image hashing as corporate secrets.

No, Facebook's side needs to verify that the image is you, and that you're not just hashing a photo of the McDonald's logo.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#160

Earlier quoted context omitted.

FaceID is unique in the sense that it's supposed to be on-device only in the form of an ASIC coprocessor.

You can't tell with closed source. Anyway, what about "iCloud backup"?

Apple doesn’t backup TouchID or FaceID data to the cloud (just as they don’t backup your iOS device passcode). You need to set up each device independently.

https://images.apple.com/ca/fr/business-docs/FaceID_Security...

Post reply on HN