Earlier quoted context omitted.
You are excused. Facebook has lots of photos of my face already, will one more make a difference?
Not everyone uploads their face to facebook over and over and over again.
But most do.
Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
241–250 of 407 posts
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#242I will never do this. I don't even post photos of myself on FB, or use "Messenger" or their mobile app, so it probably wouldn't work anyway, but I have no doubt they're looking to monetize the feature and that businesses and governments are their target markets.
Perhaps a workaround would be to pick a random celebrity, somebody with a lot of photos online, and upload one of those.
Facebook would have no way of knowing that it's not you, and they aren't likely to complain that you look like somebody else, since facial recognition will likely always pick up loads of duplicates when used on a global scale.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#243I find their claim that the picture will be deleted from their servers at odds with their claim that they will make sure that photo is unique. I suspect that what they're not saying is that they will keep some signature/hash/data about the photo, which I'm sure they will use for much more than just verifying uniqueness.
Yep, that's in the article. They say they'll hash it and delete it (the photo). They don't claim they'll delete the hash. Having the hash is enough to check for uniqueness. Although it's sort of an over-strict definition of uniqueness. Example: I change one pixel → That produces a drastically different hash → That makes the almost-identical photo seem unique.
I'd be surprised if they weren't extracting other info from the photo or training ML models on it as others suggest here.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#244I will never do this. I don't even post photos of myself on FB, or use "Messenger" or their mobile app, so it probably wouldn't work anyway, but I have no doubt they're looking to monetize the feature and that businesses and governments are their target markets.
Perhaps a workaround would be to pick a random celebrity, somebody with a lot of photos online, and upload one of those. Facebook would have no way of knowing that it's not you, and they aren't likely to complain that you look like somebody else, since facial recognition will likely always pick up loads of duplicates when used on a global scale.
Alright, they are using it when you've been locked out of your account to verify that you are who you say you are.
You'd have to seed the account in advance by uploading some photos and identifying them as yourself, and you'd have to be able to find photos that haven't been uploaded to Facebook previously.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#245i signed up with facebook (with a unique email), and encountered this. i used a picture (a painting, rather) of george washington.
it seemed to work at first, but when i tried logging in a month or two later my account was disabled. perhaps i wasn't the only person using that image and they were displeased.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#246Earlier quoted context omitted.
No, we don't. https://hackaday.com/2017/08/18/apples-secure-enclave-proces... Yeah it may be a binary dump, but it's now decrypted and understandable.
Serious question: can its firmware be upgraded through future device updates?
I THINK so.
https://www.theiphonewiki.com/wiki/Bootchain
https://www.theiphonewiki.com/wiki/Bootrom
https://www.theiphonewiki.com/wiki/25C3_presentation_%22Hack... (^F "The first piece" [of code])
https://www.cse.wustl.edu/~jain/cse571-14/ftp/ios_security/i...
The only part that is fundamentally read-only is the bootrom/SecureROM.
...Which is why https://ramtin-amin.fr/#nvmepcie and https://ramtin-amin.fr/#nvmedma are among my favorite articles ever. (iPhone 6, but still.)
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#247Earlier quoted context omitted.
Perhaps a workaround would be to pick a random celebrity, somebody with a lot of photos online, and upload one of those. Facebook would have no way of knowing that it's not you, and they aren't likely to complain that you look like somebody else, since facial recognition will likely always pick up loads of duplicates when used on a global scale.
Alright, they are using it when you've been locked out of your account to verify that you are who you say you are. You'd have to seed the account in advance by uploading some photos and identifying them as yourself, and you'd have to be able to find photos that haven't been uploaded to Facebook previously.
Accounts using celebrities as a profile picture may actually be easier to hack, since the hacker can just upload another picture of that celebrity when challenged.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#248Earlier quoted context omitted.
Or indeed care about the law enough to bother before they're fined for doing it. After all you'll need to prove they didn't delete the data first!
The GDPR penalties can reach 4% global (i.e. sum all related companies) annual turnover per infraction . If anyone ever found out Facebook had a widespread violation, Facebook would be likely be dissolved.
Are there any instances of otherwise financially sound major global corporations being dissolved as a result of EU fines / regulatory action? I suspect if the rubber hits the road in this situation, FB would prevail.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#249Earlier quoted context omitted.
> allow you to compute the hash locally presumably an attacker will just use the local process to observe and develop a method to defeat it. that said, perhaps such a methodology would require extra effort on the part of a revenge porn perp, so it might reduce the occurrences.
> presumably an attacker will just use the local process to observe and develop a method to defeat it. If they can do that then the whole method fails anyway. Besides, I think the set of your average revenge porn idiots intersected with those that are capable of defeating the hashing scheme in order to do their dirty deed is going to be exceedingly small.
> If they can do that then the whole method fails anyway.
i'm not that sure. the memory of any application can be observed, which means the process of fingerprinting - whatever it is - can be observed. executing the process enough times with a range of inputs will provide a load of analyzable data, via recording the transformation of bytes.
this is (loosely) why basically all software can be "cracked" and drm methods defeated.
> intersected with those that are capable of defeating the hashing scheme
they don't really have to, much. think of the attackers as software crackers/warez groups, and the perps as visitors to pirate bay. you don't need to know how to break drm to download cracked software, or use nefarious push-button software. there might even be (possibly illicit) business opportunities here.
Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'
#250Earlier quoted context omitted.
> yes, you're going to have to trust them with a copy of it. No. They could have you compute a fingerprint locally without uploading the image itself, preferably through some audited open source software, without auto-updates. They only don't do that because they want to guard their image hashing as corporate secrets.
> compute a fingerprint locally one downside: i think this could allow a bad actor to directly observe the fingerprinting and assist in developing a method to defeat it.
Trusted third parties.
That's what is missing from the internet, generally speaking. Services like public notaries. That's kindof what CAs provide. But there are a lot of similar services that could exist for things like this.