This new methodology is generally a pretty terrible way of dealing with user authentication. Device Profiling Facial Recognition Voice Audio Recognitio

This new methodology is generally a pretty terrible way of dealing with user authentication. Device Profiling Facial Recognition Voice Audio Recognition I mean, christ, eBay has some niche concerns with fraud, but this really has no place across most of the internet, whether it’s “already happening” or not. Google already tries to profile my device and fails miserably at doing so, frequently locking me out, because Google thinks it knows how many laptops I own and have access to. Authentic audio is a laughable idea. A: Just look at transcription, B: Replay attacks will probably be trivial, C: Vocal dopplegangers and electronic modulation are kind of easy to utilize and forge authenticity with; imitation is harder to notice than achieve. Face authentication is not only hackable, it’s intrusive, in that I don’t want systems taking pictures of my face. Foibles aside, machines will probably miss uncanny valley deception (static sculptures, photos, video, puppets), nevermind algorithmic hacks that poke holes in training data learning gaps. Ebay probably needs to guard against fraud, but not with some of the the laziest machine-learning hacks currently available. Using sly hacks to strengthen bold/cute assumptions doesn’t make anything more secure. These are hacks of convenience, not security. Passwords work, and dumb users and determined adversaries will always be a plentiful problem. Can we just admit that a lot of what happens on the internet simply isn’t important, and doesn’t demand high security, and then stop treating it like the blood of one’s first-born is needed to create an account or use it?