291–300 of 407 posts
Last paragraph of the article: "The new authentication scheme is the second in recent weeks that relies on photos. Earlier this month, Facebook asked users to upload nude photos to Facebook Messenger, as part of an effort to prevent revenge porn. Facebook said it would use the nude photos to create a digital fingerprint against which to compare future posts." Wait what? I had to check whether today was April 1st.
Earlier quoted context omitted.
I wonder if some three letter agency is paying facebook to build them the biggest face recognition database in the world.
No need to get all conspiratorial. Picasa did it before Google, AWS does it now. It’s what people (writ large) want.
Also being a part of the 14 eyes means if the United States wanted my biometrics all they need to do is ask. My country is already moving towards real time cctv identification in airports etc. using biometrics from any issued license / passport.
>> “Please upload a photo of yourself that clearly shows your face. We’ll check it and then permanently delete it from our servers.” >> To determine if the account is authentic, Facebook looks at whether the photo is unique. I assume this means that the photo itself is deleted but a one-way hash of it created to test against later. However, if I change one pixel of a picture of my face, A, to produce a new picture of…
Hashes don't necessarily work on the raw bit representation of something. You can have a hash which works on higher level constructs, which for images one solution would be called a perceptual hash.
Earlier quoted context omitted.
There was a thread about this on HN -- too lazy to look it up now or repeat some of the longer comments about it. But going into this assuming that FB has no ill-intentions, FB's proposal seems by far the best solution in a world of ugly and terrible solutions. For starters, it's intended for victims of revenge porn, which is a fairly extreme category and one in which the harassment is distinctively aggressive and vi…
I disagree: - It sets a precedent for uploading nude photos to FB and for them asking for it. - You need to trust FB to delete the photos when they receive it. Yes, I understand that they probably will, but really, how many systems are those bits going to touch? How many logs are going to have this information? Can you be really sure? A better implementation would be for the FB client to hash the file and for the has…
Earlier quoted context omitted.
> Before we reduce this to a slippery slope, what scenario do you envision in which FB could coax its userbase to upload nude photos? The one where FB asks its userbase to upload nude photos[0]. [0] https://news.ycombinator.com/item?id=15651710
That's exactly the topic we're discussing now. Sorry, with "userbase" I meant " general userbase". This initiative they're proposing -- in coordination with a safety group in Australia -- is aimed at revenge porn victims. The general userbase of Facebook aren't in that group.
Earlier quoted context omitted.
This is the case with almost all crypto currency exchanges as well. Even in that case, which I can sort of understand (even tho I still hate it), I was pretty off put by it. If Facebook or some other service starts doing this to me, I will use something else.
Oh, right yes I forgot that. I was going to sign up for Coinbase to demonstrate some stuff as a live demo - buy a few $ worth of BTC and transfer it between wallets/show it in the public blockchain/etc. They wanted me to scan and upload a government issued ID in order to give them money. Nooope, not a chance in hell.
This isn't Coinbase twirling their evil mostache and scheming about selling your personal data.
Earlier quoted context omitted.
Hash your copy of the nude image client side, and upload the hash only? Seems like a way better idea to me.
A hash would only match an identical file, right? It sounds like image recognition is used here to catch derivatives of the original file, which a hash wouldn't catch.
Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…
This is the case with almost all crypto currency exchanges as well. Even in that case, which I can sort of understand (even tho I still hate it), I was pretty off put by it. If Facebook or some other service starts doing this to me, I will use something else.
Earlier quoted context omitted.
How about recompressed, resized, photoshopped, format-converted... a filter against trivial transformations like transposition is worthless.
tough problem sure, but sending nude photos to a morally questionable company is not remotely close to the best solution to this problem.
You should just post the nudes yourself IMHO and be done with it.
Earlier quoted context omitted.
> compute a fingerprint locally one downside: i think this could allow a bad actor to directly observe the fingerprinting and assist in developing a method to defeat it.
Or the attacker could just post the image elsewhere.