Live data from Hacker News

The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

democrats.senate.gov

31–40 of 136 posts

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#31
post #25

It's not clear what is the potential threat this specific app introduces. A nation state can easily perform facial recognition on the majority of the human race by scraping social media.

No need to be a state actor, private companies do that too and sell data to law enforcement. There is no realistic threat, just propaganda.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#32

There is no threat model for an iPhone app to do nefarious things in an App Store distributed app on a non-jailbroken phone. At most, FaceApp grabs the picture you uploaded and some minor meta-data that every app using an analytics tool (read: all of them) collects. This is political grand-standing at best, and would be a non-issue if you replaced the geographic location of the dev team with any other countries I get…

The threat model is that this photo is shared with the Russian government and then the Russian government can match American citizens (or potentially people working in intelligence), and then using that in facial recognition programs. I.e. they can differentiate Americans (insert x country) from their own citizens and know who to watch more carefully.

This is a legitimate threat model. I'm not sure why you think it wouldn't be. Spies and others do use fake identities. The threat model is that there is that there is a way to determine who is faking their identities.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#33
post #25

It's not clear what is the potential threat this specific app introduces. A nation state can easily perform facial recognition on the majority of the human race by scraping social media.

Many foreign nation states might have access to like, 500x400 pixel photos of people. Not 12 megapixel direct front selfie camera taken photos, where the person is intentionally trying to get the highest quality photo possible.

You don't really need high res for face recognition. In fact, the high frequencies are probably noise that you'd want to remove with a low-pass filter.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#34

There is no threat model for an iPhone app to do nefarious things in an App Store distributed app on a non-jailbroken phone. At most, FaceApp grabs the picture you uploaded and some minor meta-data that every app using an analytics tool (read: all of them) collects. This is political grand-standing at best, and would be a non-issue if you replaced the geographic location of the dev team with any other countries I get…

This might have something to do with Russia banning the sale of smartphones without Russian apps today:

https://www.themoscowtimes.com/2019/12/02/russia-bans-iphone...

It's a tit-for-tat response, showing that if they want to make this a trade war, their companies will get hurt too. So yes, national grandstanding.

Edit: Wups, dates are wrong. This FBI release is from November 25, so the Russian law is likely in response to it, not vice versa. Still national grandstanding, but the idiot party isn't necessarily the Russians.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#35
post #5

Looks like the FBI designated FaceApp as a threat because of its crazy data policy and its Russian origin. Even though I think it's a really shady app, that's a pretty low bar.

It says potential threat, not threat, and according to this letter, the Russian government can access ISP data directly without request.

Thankfully that doesn't happen anywhere else in the world.

Australian government metadata requests was well over 300,000 last year, nearly 1000 requests a day all warrantless, can come from tiny local councils or horse racing orgs. Trust us, they say, there's oversight in hidden tribunals, they say.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#36
post #21

There is no threat model for an iPhone app to do nefarious things in an App Store distributed app on a non-jailbroken phone. At most, FaceApp grabs the picture you uploaded and some minor meta-data that every app using an analytics tool (read: all of them) collects. This is political grand-standing at best, and would be a non-issue if you replaced the geographic location of the dev team with any other countries I get…

By "non-jailbroken" you should mean "jailbreakable": it is the existence of the vulnerability that makes the phone insecure, not the user having used an exploit to leverage that vulnerability to do something for them. Like, for no avoidance of doubt: if you are running a version of iOS for which you can download an app-based jailbreak (which has been all jailbreaks for current phones that have been released for years…

Just to be clear, you’re saying that FaceApp has a yet unfound component that lets them remotely jailbreak an otherwise un-jailbroken Phone via a published AppStore app? and that they’ve done this in the open on one of the most politically criticized apps short of Facebook?

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#37
post #25

It's not clear what is the potential threat this specific app introduces. A nation state can easily perform facial recognition on the majority of the human race by scraping social media.

Many foreign nation states might have access to like, 500x400 pixel photos of people. Not 12 megapixel direct front selfie camera taken photos, where the person is intentionally trying to get the highest quality photo possible.

You are assuming that high resolution details of a face have value in a world where surveillance doesn't capture faces in high resolution.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#38
post #9

Plenty of chinese apps under "utility" category is flooding the us consumers...

Notably ES File Explorer was recently removed form the Google play store because of suspicious behavior. One of the most popular Android file managers.

Total Commander was the recommended replacement a while ago when ES started to become shady.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#39
The best measure would be for “good actors” (universities, government research agencies, the New York Times) to provide a free FaceApp-type app. It’s like a weekend-hackathon of work and can be prioritized by the app stores.

Re: The FBI considers FaceApp to be a potential counterintelligence threat [pdf]

#40

There is no threat model for an iPhone app to do nefarious things in an App Store distributed app on a non-jailbroken phone. At most, FaceApp grabs the picture you uploaded and some minor meta-data that every app using an analytics tool (read: all of them) collects. This is political grand-standing at best, and would be a non-issue if you replaced the geographic location of the dev team with any other countries I get…

The threat model is that this photo is shared with the Russian government and then the Russian government can match American citizens (or potentially people working in intelligence), and then using that in facial recognition programs. I.e. they can differentiate Americans (insert x country) from their own citizens and know who to watch more carefully. This is a legitimate threat model. I'm not sure why you think it w…

A picture, that has no good associated data about the user, is a real threat? Heaven forbid Russia figures out how to take pictures in public places
Post reply on HN