Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

wired.com

Post reply on HN
Print view View original

281–290 of 407 posts

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#281

Post by kuschku »

goialoq wrote: post #266
geocar wrote: post #181

Earlier quoted context omitted.

The GDPR penalties can reach 4% global (i.e. sum all related companies) annual turnover per infraction . If anyone ever found out Facebook had a widespread violation, Facebook would be likely be dissolved.

That's insane. What's a "single" infraction? It doesn't distinguish between revenue and profit? 4% of global revenue could be more than the total of all profit and salaries.

> 4% of global revenue could be more than the total of all profit and salaries.

That’s the point. Google recently came of comparatively well with a 4 billion EUR fine, but 2 more fines of the same height for Google are expected.

The only way to force a company to follow a law is to make infringing the law more expensive than any profit you could ever dream of making from it.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#282

Post by JoBrad »

Tarq0n wrote: post #274
will_hughes wrote: post #257

Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…

I wonder if some three letter agency is paying facebook to build them the biggest face recognition database in the world.

No need to get all conspiratorial. Picasa did it before Google, AWS does it now. It’s what people (writ large) want.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#283

Post by thisacctforreal »

abiox wrote: post #232
the8472 wrote: post #155

Earlier quoted context omitted.

> yes, you're going to have to trust them with a copy of it. No. They could have you compute a fingerprint locally without uploading the image itself, preferably through some audited open source software, without auto-updates. They only don't do that because they want to guard their image hashing as corporate secrets.

> compute a fingerprint locally one downside: i think this could allow a bad actor to directly observe the fingerprinting and assist in developing a method to defeat it.

Or the attacker could just post the image elsewhere.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#284

Post by owebmaster »

JoBrad wrote: post #282
Tarq0n wrote: post #274

Earlier quoted context omitted.

I wonder if some three letter agency is paying facebook to build them the biggest face recognition database in the world.

No need to get all conspiratorial. Picasa did it before Google, AWS does it now. It’s what people (writ large) want.

> No need to get all conspiratorial

How I wish large scale surveillance was conspiratorial. Do you really believe in what you say or is it only habit?

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#285

Post by thisacctforreal »

abiox wrote: post #249
jacquesm wrote: post #240

Earlier quoted context omitted.

> presumably an attacker will just use the local process to observe and develop a method to defeat it. If they can do that then the whole method fails anyway. Besides, I think the set of your average revenge porn idiots intersected with those that are capable of defeating the hashing scheme in order to do their dirty deed is going to be exceedingly small.

> If they can do that then the whole method fails anyway. i'm not that sure. the memory of any application can be observed, which means the process of fingerprinting - whatever it is - can be observed. executing the process enough times with a range of inputs will provide a load of analyzable data, via recording the transformation of bytes. this is (loosely) why basically all software can be "cracked" and drm methods…

Sure, or they could upload to imgur and share with SMS.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#286

Post by AlphaWeaver »

JoshMnem wrote: post #154
Tharkun wrote: post #127

I was recently locked out of my FB account. The only way to unlock it was to identify my friends' pictures. Apparently sending me an e-mail was too much trouble ... Haven't been able to log in since, as I refuse to partake in that sort of bullshit. Can't say I miss it.

You could upload a fake photo to login, delete your content, and then delete your Facebook account.

It's already been proven that even upon request, Facebook doesn't actually delete content.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#287

Post by 3131s »

sliverstorm wrote: post #228
ProAm wrote: post #214

Earlier quoted context omitted.

I think it would be easy to create multiple hashes (reverse, flipped, etc...) and upload them all and look for matches. Provide the users with image recognition signature creating software (which is exactly what they are going to do) and let the users do it, vs uploading extremely personal and potentially embarrassing images to strangers on the internet.

How about recompressed, resized, photoshopped, format-converted... a filter against trivial transformations like transposition is worthless.

It's called a perceptual hash, and there is a lot of research in this area.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#288

Post by Freestyler_3 »

halflings wrote: post #225
jesperlang wrote: post #209

Earlier quoted context omitted.

wording like this is really tricky (intentionally so!), it exploits our naive notion of digital information as files. One aspect is the machine learning you mention but basically they can also create a new "file" from your image with metadata about your image. Metadata rich enough to render the original image unnecessary. There is no way out of this relatiohship with FB, however they formulate words to comfort you, t…

The more data they keep about these images that they are promising to delete, the more they would make themselves liable to be sued for privacy violation (especially in the EU). It is a blurred line, but one that most rational companies (=not Uber) would prefer to avoid in the first place by only storing data that is necessary for their main functionality.

Before the EU sues there will be warnings and talks, plenty of time to collect a lot of faces.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#289

Post by will_hughes »

freedomben wrote: post #279
will_hughes wrote: post #257

Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…

This is the case with almost all crypto currency exchanges as well. Even in that case, which I can sort of understand (even tho I still hate it), I was pretty off put by it. If Facebook or some other service starts doing this to me, I will use something else.

Oh, right yes I forgot that. I was going to sign up for Coinbase to demonstrate some stuff as a live demo - buy a few $ worth of BTC and transfer it between wallets/show it in the public blockchain/etc.

They wanted me to scan and upload a government issued ID in order to give them money. Nooope, not a chance in hell.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#290

Post by wallace_f »

Santosh83 wrote: post #267
bsaul wrote: post #151

I used to think richard stallman was just a paranoid lunatic... Well, the more time goes by, the more i think he was just 100% right. It's time to be much much more careful and radical with the path technology is taking us. It's time we all invest a bit of our time to provide real open and benevolent alternatives to facebook, google, amazon, and all the rest, because they're steering internet toward an orwelian night…

Network effects. You and me care. Sadly the vast majority around us bow unquestioningly to demands made by powerful groups like their govt or huge mega-corps. People seem to think these power-centres will always be benevolent and flawless... which history shows is a big mistake to assume.

Fake News! Can't we have some trusted institution like ycombinator put these kind of comments through their truth filter before allowing them to be posted? They could even partner with Facebook to do this. /s
Post reply on HN