The next level would probably be: provide your SSN.
Experian probably already shared that with them.
Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
231–240 of 407 posts
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#232Earlier quoted context omitted.
Presumably, you would do this after Facebook already has a copy of the nude -- uploaded by the attacker/malicious ex. If you want Facebook's computers to automatically take down any copies of the photo, yes, you're going to have to trust them with a copy of it. Automated DMCA takedowns of copyrighted music and movies work in very much the same way.
> yes, you're going to have to trust them with a copy of it. No. They could have you compute a fingerprint locally without uploading the image itself, preferably through some audited open source software, without auto-updates. They only don't do that because they want to guard their image hashing as corporate secrets.
> compute a fingerprint locally
one downside: i think this could allow a bad actor to directly observe the fingerprinting and assist in developing a method to defeat it.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#233I used to think richard stallman was just a paranoid lunatic... Well, the more time goes by, the more i think he was just 100% right. It's time to be much much more careful and radical with the path technology is taking us. It's time we all invest a bit of our time to provide real open and benevolent alternatives to facebook, google, amazon, and all the rest, because they're steering internet toward an orwelian night…
There are existing social media alternatives to facebook, such as: gnu social; postActiv; mastodon; diaspora; hubzilla; etc.
it's a great start but it's not mainstream yet. We need something as polished as wikipedia.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#234Earlier quoted context omitted.
I think it would be easy to create multiple hashes (reverse, flipped, etc...) and upload them all and look for matches. Provide the users with image recognition signature creating software (which is exactly what they are going to do) and let the users do it, vs uploading extremely personal and potentially embarrassing images to strangers on the internet.
How about recompressed, resized, photoshopped, format-converted... a filter against trivial transformations like transposition is worthless.
tough problem sure, but sending nude photos to a morally questionable company is not remotely close to the best solution to this problem.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#235Eject eject eject
Abandon ship.
Or abandon Facebook. .
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#236Earlier quoted context omitted.
misrepresents the idea of the service. It's supposed to tackle the 'revenge porn' issue. If someone sees their own nudes show up on facebook, they can send a picture to facebook, which I assume get's fed into an image detection service that then tries to remove the already circulating nudes automatically.
There are way better and safer and less invasive ways to provide this service than uploading a personal photo to a 3rd party website.
> There are way better and safer and less invasive ways
in theory or in practice? do these ways have other caveats?
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#237Earlier quoted context omitted.
There was a thread about this on HN -- too lazy to look it up now or repeat some of the longer comments about it. But going into this assuming that FB has no ill-intentions, FB's proposal seems by far the best solution in a world of ugly and terrible solutions. For starters, it's intended for victims of revenge porn, which is a fairly extreme category and one in which the harassment is distinctively aggressive and vi…
I disagree: - It sets a precedent for uploading nude photos to FB and for them asking for it. - You need to trust FB to delete the photos when they receive it. Yes, I understand that they probably will, but really, how many systems are those bits going to touch? How many logs are going to have this information? Can you be really sure? A better implementation would be for the FB client to hash the file and for the has…
> - It sets a precedent for uploading nude photos to FB and for them asking for it.
umm, no. If I understand correctly, the user believes that their nude may end up on FB. The user takes initiative to upload their copy of the nude to FB to prove ownership or damages.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#238Earlier quoted context omitted.
They don't. They store a perceptual hash, which can't be converted back into the original photo.
So you hope. But you have to upload your picture first. If they were serious about this they would allow you to compute the hash locally and then only to upload the hash. Note that they explicitly state that a human will look at the image and then hash it. So they are storing it at least for a while. And you will not be able to verify whether they really delete it or not.
> allow you to compute the hash locally
presumably an attacker will just use the local process to observe and develop a method to defeat it.
that said, perhaps such a methodology would require extra effort on the part of a revenge porn perp, so it might reduce the occurrences.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#239You would think that for captcha purposes (ie. a unique, quickly produced, creative item) it would suffice to say "draw a picture of a dog" (or "upload a clear photo of your hand").
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#240Earlier quoted context omitted.
So you hope. But you have to upload your picture first. If they were serious about this they would allow you to compute the hash locally and then only to upload the hash. Note that they explicitly state that a human will look at the image and then hash it. So they are storing it at least for a while. And you will not be able to verify whether they really delete it or not.
> allow you to compute the hash locally presumably an attacker will just use the local process to observe and develop a method to defeat it. that said, perhaps such a methodology would require extra effort on the part of a revenge porn perp, so it might reduce the occurrences.
> presumably an attacker will just use the local process to observe and develop a method to defeat it.
If they can do that then the whole method fails anyway.
Besides, I think the set of your average revenge porn idiots intersected with those that are capable of defeating the hashing scheme in order to do their dirty deed is going to be exceedingly small.