To uncover a deepfake video call, ask the caller to turn sideways

Post by oliwarner » Mon, Aug 08, 2022, 6:50 PM UTC

ballenf wrote: post #114

mike_hearn wrote: post #112

Long term, the only robust way to solve this is going to involve a remote attestation chain i.e. video that's being signed by the web cam as it's produced, and then transformed/recompressed inside e.g. SGX enclaves or an SEV protected virtual machine that's sending an RA to the other side. Although hard to set up (you need a lot of people to cooperate and CPU vendors have to bring these features back to consumer hard…

Then you just point the webcam at a screen or microphone at a speaker? I really don't think moving our trust to unknown, unnamed manufacturers of hardware in far away places is a solution. The solution is not going to be high tech, imho. Just like we have learned a skepticism resulting from Photoshop, we'll learn a skepticism of live video or audio.

Post by jacobsenscott » Mon, Aug 08, 2022, 6:55 PM UTC

Post by kevin_thibedeau » Mon, Aug 08, 2022, 6:56 PM UTC

reaperducer wrote: post #117

sockaddr wrote: post #107

Earlier quoted context omitted.

May I ask what card/Institution? This would be an immediate no for me.

I'd trust the data with a (real, not online) bank more than most other companies like Google. I'd be more worried about people hacking into networked security camera DVRs at stores and cafes and extracting image data from there. Multiple angles. Movement. Some are very high resolution these days. Sometimes they're mounted right on the POS, in your face. Sometimes they're actually in the top bezel of the beverage cool…

Post by ErikCorry » Mon, Aug 08, 2022, 7:06 PM UTC

WalterBright wrote: post #73

sbszllr wrote: post #18

Source: I work in the field. This is a current limitation, and an artifact of the data+method but not something that should be relied upon. If we do some adversary modelling, we can find two ways to work around this: 1) actively generate and search for such data; perhaps expensive for small actors but not well equipped malicious ones. 2) wait for deep learning to catch up, e.g. by extending NERFs (neural radiance fie…

I wonder how good the deepfake would be for things it didn't have training data on. For example, making an extreme grimace. Or have the caller insert a ping pong ball in his cheek to continue, or pull his face with his fingers. One thing I notice with colorized movies is the color of the actor's teeth tends to flicker between grey and ivory. I wonder if there are similar artifacts with deep fakes.

Post by mulmen » Mon, Aug 08, 2022, 7:08 PM UTC

reaperducer wrote: post #117

sockaddr wrote: post #107

Earlier quoted context omitted.

May I ask what card/Institution? This would be an immediate no for me.

I'd trust the data with a (real, not online) bank more than most other companies like Google. I'd be more worried about people hacking into networked security camera DVRs at stores and cafes and extracting image data from there. Multiple angles. Movement. Some are very high resolution these days. Sometimes they're mounted right on the POS, in your face. Sometimes they're actually in the top bezel of the beverage cool…