4 ms·

> The process is automated, including identifying suspicious activity and checking the photo. ... The Facebook spokesperson said the photo test is one of severa

> The process is automated, including identifying suspicious activity and checking the photo. ... The Facebook spokesperson said the photo test is one of several methods, both automated and manual, used to detect suspicious activity. So I don't get if this "captcha" process is automated or manual (...or both)? Somewhere else in the article it says that users are apparently locked out of their accounts until the pic is verified. Seems odd that there should be a lock-out period if the process is automated (as the first sentence of the above quote implies). ALSO, for a captcha, isn't this dead easy for bots? Get a DeepDream/Generative Adversarial Network instance to generate faces for you. Bam. This is not a barrier.

intopieces 9y ago
Couple things. 1.) The face verification is automatic. It is among other processes that are automatic and some other processes that are manual. 2.) Lock out periods are to prevent repeated attempts. 3.) The face has to match the face of the account, so generating a new face won’t work.
- dragonwriter 9y ago
  > The face has to match the face of the account, so generating a new face won’t work. It quite easily could work well if the account has, or is tagged in, any public images and those are used as input to the generation process. (Or if it's associated with a person of whom there are public images in other sources, off of Facebook.) I'm assuming the process is sophisticated enough that you can't just post an existing public Facebook image of the user without modification, but that may be too generous.
- skytreader 9y ago
  Where was it specified that lock-outs are to prevent repeated attempts? It is a plausible reason but the premise of my question (and confusion as to whether this process is automatic or not) stems from: > ...users are locked out of their accounts _while the photo is being verified_. A message said, “You Can’t Log In Right Now. We’ll get in touch with you _after we’ve reviewed your photo_. You’ll now be logged out of Facebook as a security precaution.” Emphasis mine. "after we've reviewed your photo" --> FB can autotag people as pictures are uploaded. Surely they can verify face similarity instantly?

intopieces 9y ago

Couple things. 1.) The face verification is automatic. It is among other processes that are automatic and some other processes that are manual. 2.) Lock out periods are to prevent repeated attempts. 3.) The face has to match the face of the account, so generating a new face won’t work.

dragonwriter 9y ago
> The face has to match the face of the account, so generating a new face won’t work. It quite easily could work well if the account has, or is tagged in, any public images and those are used as input to the generation process. (Or if it's associated with a person of whom there are public images in other sources, off of Facebook.) I'm assuming the process is sophisticated enough that you can't just post an existing public Facebook image of the user without modification, but that may be too generous.
skytreader 9y ago
Where was it specified that lock-outs are to prevent repeated attempts? It is a plausible reason but the premise of my question (and confusion as to whether this process is automatic or not) stems from: > ...users are locked out of their accounts _while the photo is being verified_. A message said, “You Can’t Log In Right Now. We’ll get in touch with you _after we’ve reviewed your photo_. You’ll now be logged out of Facebook as a security precaution.” Emphasis mine. "after we've reviewed your photo" --> FB can autotag people as pictures are uploaded. Surely they can verify face similarity instantly?