How is this supposed to work in low-light and dark environments, like a classy restaurant? What about people that don't have camera phones? This will end up being opt-in only, I'm sure. Can you imagine the checkout at the supermarket as vain people hold the line up while they make up their hair? I really don't see this as becoming commonplace.
MasterCard to start verifying transactions through selfies
11–20 of 56 posts
Re: MasterCard to start verifying transactions through selfies
#12People are missing the point, like "chip and pin" this is not about protecting the consumer but about protecting Mastercard and their duopoly
"What you mean you did not pay for a hooker and rum in Amsterdam, then who is this in a selfie you took" > shows a selfie some hacker stole from the poor eejits Lifeinvader page.
Re: MasterCard to start verifying transactions through selfies
#13I don't even have a cell phone. And there is zero chance I would ever get one just so that SlaveCard will process payments for me. That whole industry is like the grandfather that clearly can't drive anymore but everyone's afraid to confront about taking the keys away... why is nobody willing to 'disrupt' these people already?
Re: MasterCard to start verifying transactions through selfies
#14Relevant link: "Fingerprints are usernames, not password" (applies to all biometrics): http://blog.dustinkirkland.com/2013/10/fingerprints-are-user... Long story short, it's a bad idea, and it's really not secure.
In the two years since that article was written, how many cases have there been of iPhones actually hacked in the wild through TouchID?
Re: MasterCard to start verifying transactions through selfies
#15I would just be happy if I could actually use my "chip and pin" credit card when performing a transaction. I have yet to find a retailer where I can actually use it.
Re: MasterCard to start verifying transactions through selfies
#16There's lots of easy avenues to attack this.
1. Look for user's Youtube, Facebook, and other social media for photos/video
2. Videochat and record them.
3. Find them IRL and record them.
4. Print a mask of that person, and leave eye holes. Now you blink instead.
Ridiculous.
Re: MasterCard to start verifying transactions through selfies
#17There's a better link here [1], which explains with more details. Main thing seems that it's not just facial recognition, you can use a fingerprint scanner (assuming your phone has one) instead, and that it requires you to blink when you're being scanned by the app. So it doesn't seem to be just static image recognition, it's looking at the video stream to ensure that your face is there and that it can blink (getting…
Since a video is just a string of images, all the attacker would need is a sufficient number of photoshopped images to show a series that (when stitched into a video) shows the user blinking. I'm pretty sure you could make a Photoshop plugin that would do this.
I'll do you one better: you could probably make a print-out paper 'mask' of a person's face and just blink yourself, or something similar. This kind of tech isn't always as smart as we think.
Re: MasterCard to start verifying transactions through selfies
#18Hahahahahaha. Remember that OS X login mode by your own selfie where you could simulate blinking with a matchstick and login with a photograph?
Re: MasterCard to start verifying transactions through selfies
#19[deleted]
Re: MasterCard to start verifying transactions through selfies
#20I would just be happy if I could actually use my "chip and pin" credit card when performing a transaction. I have yet to find a retailer where I can actually use it.
Interesting, where are you located? Here in Canada I use mine practically everywhere on a daily basis.