Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

wired.com

Post reply on HN
Print view View original

391–400 of 407 posts

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#391

Post by otakucode »

beojan wrote: post #388
will_hughes wrote: post #257

Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…

Until we get government signed personal digital certificates, it's the only sure way to authenticate that you really are who you say you are. Does Instagram need to be that sure? Probably not.

Terrible idea. When a unique identifier is necessary, it should be minted for that purpose and only for that purpose. There is absolutely no reason, and substantial disincentive, to create any singular identifier that could ever be cross-referenced across disparate organizations/systems/etc. No, you really don't need to be able to find out exactly who voted for your party in the last election and has an income over 6 figures, nor do you need to know how many cancer survivors choose Budweiser. If what you actually need to make sure the person closing an account is the same as the one who opened it, then that is absolutely the only fact which that identifier should be capable of ever being used for.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#392

Post by otakucode »

Tarq0n wrote: post #274
will_hughes wrote: post #257

Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…

I wonder if some three letter agency is paying facebook to build them the biggest face recognition database in the world.

Facial recognition is utter garbage and until every phone has Apple's FaceID stuff, it always will be. The TLAs know this and aren't going to waste efforts in that particular snake oil.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#393

Post by otakucode »

mitchellberry wrote: post #292
JoBrad wrote: post #282

Earlier quoted context omitted.

No need to get all conspiratorial. Picasa did it before Google, AWS does it now. It’s what people (writ large) want.

Considering nearly every adult provides a photo of higher quality to their respective governments it does seem a tad conspiratorial and like a lot of unecessary effort. Also being a part of the 14 eyes means if the United States wanted my biometrics all they need to do is ask. My country is already moving towards real time cctv identification in airports etc. using biometrics from any issued license / passport.

>My country is already moving towards real time cctv identification in airports etc.

Your country must be very gullible and have poor standards of proof. Facial recognition is nowhere near capable of any such feat. Even in cases where the picture is taken under controlled circumstances, with ideal lighting, in good resolution, without extraneous background details, etc, facial recognition is still utterly terrible at matching people against a database of known images.

Tell your government to prosecute whatever contracting company lied to them and said such a thing could work for fraud and instead look into technologies that work, like those touchless optical fingerprint scanners that can take a persons prints from several feet away. Heck, I wouldn't be surprised if gait recognition had a higher ID rate than facial recognition. Prints and irises are both very good biometrics, facial is less reliable than having a schizophrenic practice phrenology on people one by one.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#394

Post by nicky0 »

drb91 wrote: post #260
nicky0 wrote: post #241

Earlier quoted context omitted.

But most do.

Most humans don’t even have a facebook account. Did you mean “most people in my observable social circle and subculure”? Just because many of my generation willingly give their identity away does not mean this behavior is normal or that this is an excusable form of exploitation.

That is correct, currently only about one third of all humans over 13 are active users of Facebook.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#395

Post by Chaebixi »

will_hughes wrote: post #257

Instagram did this same bullshit to me when I signed up for an account to to follow some photographers. 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'. No, fuck that for a joke. There's this growing trend of everyone wanting your photo and some ID, and then you have no way to verify that information is being kept securely or…

> 'Please provide a clear photo of yourself holding your government issued ID, and a piece of paper with the following code handwritten on it'.

This is literally stuff authoritarian regimes are doing to control their populations.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#396

Post by darklajid »

irpapakons wrote: post #361
darklajid wrote: post #338

Earlier quoted context omitted.

Same thing for me with Battle.Net I moved to Singapore. Their purchases are region locked (and may they burn in hell for that alone). Tried to change my account's country, but that requires submitting your ID and your address, the latter has to be verified by either being shown on the ID or by .. submitting a utility bill or something related. For a game account. For a change that is irrelevant and only matters becau…

I had the same happen to me when I moved countries, but I kind of understand it too as there is a whole industry of stealing and selling WoW accounts for a lot of money.

I don't buy it..

So I steal your password and account, sell it off (who buys stolen accounts? What do I know): Why would you need to change the account country?

I literally just wanted to change the account country to .. give Blizzard money. Anyone with access to one of my (now) two Battle.Net accounts can play my games and use anything in-game. What is this address verification actually protecting?

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#397

Post by beojan »

otakucode wrote: post #391
beojan wrote: post #388

Earlier quoted context omitted.

Until we get government signed personal digital certificates, it's the only sure way to authenticate that you really are who you say you are. Does Instagram need to be that sure? Probably not.

Terrible idea. When a unique identifier is necessary, it should be minted for that purpose and only for that purpose. There is absolutely no reason, and substantial disincentive, to create any singular identifier that could ever be cross-referenced across disparate organizations/systems/etc. No, you really don't need to be able to find out exactly who voted for your party in the last election and has an income over 6…

There are plenty of times you do need to authenticate someone's true identity. If you're opening a bank account, or offering a loan or credit account (of any sort).

Personally, I'd go so far as even if you're opening an email or social media account under your purported real name (so someone else can't set up a Twitter or Instagram account pretending to be you).

To clarify, given how easily people trust social media, identity verification should probably be required unless it is clearly a pseudonym.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#398

Post by geocar »

pbhjpbhj wrote: post #367
goialoq wrote: post #266

Earlier quoted context omitted.

That's insane. What's a "single" infraction? It doesn't distinguish between revenue and profit? 4% of global revenue could be more than the total of all profit and salaries.

Then they better do their best not to infringe the privacy rights of EU citizens then, eh?

Yes.

And European courts consider intent carefully. Mere aggregation of personal data isn’t necessarily a violation, but using it commercially almost certainly is.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#399

Post by geocar »

goialoq wrote: post #266
geocar wrote: post #181

Earlier quoted context omitted.

The GDPR penalties can reach 4% global (i.e. sum all related companies) annual turnover per infraction . If anyone ever found out Facebook had a widespread violation, Facebook would be likely be dissolved.

That's insane. What's a "single" infraction? It doesn't distinguish between revenue and profit? 4% of global revenue could be more than the total of all profit and salaries.

> What's a "single" infraction?

There are lots of things that constitute an infraction: the GDPR aims to broadly protect EU citizen rights. Some infractions can be per individual harmed.

Re: Facebook’s New Captcha Test: 'Upload a Clear Photo of Your Face'

#400

Post by otakucode »

beojan wrote: post #397
otakucode wrote: post #391

Earlier quoted context omitted.

Terrible idea. When a unique identifier is necessary, it should be minted for that purpose and only for that purpose. There is absolutely no reason, and substantial disincentive, to create any singular identifier that could ever be cross-referenced across disparate organizations/systems/etc. No, you really don't need to be able to find out exactly who voted for your party in the last election and has an income over 6…

There are plenty of times you do need to authenticate someone's true identity. If you're opening a bank account, or offering a loan or credit account (of any sort). Personally, I'd go so far as even if you're opening an email or social media account under your purported real name (so someone else can't set up a Twitter or Instagram account pretending to be you). To clarify, given how easily people trust social media,…

I think you misunderstood me. I'm not saying being able to identify someone is bad, just that it should be tied to what actually matters. When you're opening a bank account or something, you don't care if that person buys beer, and it makes no sense for the same identifier to be used for both of those things and for a multitude of other random things. That only invites a great deal of trouble. You care about whether they have the collateral they claim or the job they claim and things like that, each of which could have their own unique identifier signed by the employer or similar. At each need for identification, the possible correlations need to be considered and minimized.
Post reply on HN