9 ms·
GAN-generated facial images that are capable of impersonating multiple IDs
- arbol 5y agoDoes this mean that AI facial recognition evidence is inadmissable in court?
- quietbritishjim 5y agoSurely just common sense (amongst people who understand AI, anyway) means that AI facial recognition evidence is inadmissable in court. At best, ignoring privacy issues, it should be used to identify a potential match if the workload is too much for a human, then a human does the verification step on the matched faces.
- shakna 5y agoWe've had charges filed [0], without a human being part of the verification step. I don't think we've yet seen whether this information can be used as admissible evidence... But it wouldn't surprise me it is only a matter of time. [0] https://www.wired.com/story/flawed-facial-recognition-system-sent-man-jail/ https://www.wired.com/story/flawed-facial-recognition-system...
- arbol 5y agoYeah I realised after that humans would (hopefully) vet the match!
- BoxOfRain 5y agoSadly the Venn diagram of “people who understand AI” and “people involved in the lawmaking process” seems to be almost just two separate circles.
- jessaustin 5y agoPhotos and video are admissible. It would seem fairly dumb to set up cameras for facial recognition and not keep the originals?
- jobigoud 5y agoAnd use humans for the recognition? What if computers get better on average?
- jessaustin 5y agoIf that ever happens, the courts could be the last to know. Or, more probably they will assume it's true several decades too early.
- lostlogin 5y agoAs a teenager, I was the meatspace opposite of this. I had a face that could trigger about 50% of store security guards. I was regularly searched, questioned or asked to leave. I was not shoplifting or even considering it. I’m not sure what demographic I fitted, but I am glad I have left it.
- deleted 5y ago[deleted]
- serf 5y ago>As a teenager >I’m not sure what demographic I fitted, but I am glad I have left it. I think you already got it figured. The older I get the more every authority figure everywhere leaves me alone. I was probably more 'innocent' as a teenager, though.
- not-so 5y agoAs a teenager I realized that I could get away with anything because of how I looked. I could effortlessly shoplift whatever I wanted and did so for many years. Later on I got away with selling drugs for a long time, including being pulled over but not searched with a quarter brick in the trunk of my car! I did get raided later but got very lucky as I had mostly cleared house and they did not find the several sheets of LSD in my freezer.
- domano 5y agoWhat does this mean for the security of FaceID? Anyone with deeper knowledge? I am not very knowledgable in this field.
- jw1224 5y agoI doubt Face ID would be vulnerable to these. Face ID uses projection mapping and infrared photography [1] to establish depth, ensuring a face is "genuine" and not simply a photograph. [1] https://support.apple.com/en-gb/HT208108 https://support.apple.com/en-gb/HT208108
- rbanffy 5y agoNot to this one, but if you use 3D faces for input, you'll end up with something that will: a) defeat Face ID b) look like the result of a horrific teletransporter accident.
- angulardragon03 5y agoIt would have to be device specific, as the dot projectors in each FaceID device have a randomised layout unique to that device [1]. This seems to be part of why the FaceID sensor is paired to a device. [1] https://www.apple.com/business-docs/FaceID_Security_Guide.pdf https://www.apple.com/business-docs/FaceID_Security_Guide.pd... (page 3)
- rbanffy 5y agoStill possible. You'd need to extract and operate multiple Face ID detectors to get the right signals and probably scan thousands of faces to learn signatures and what's needed to fake the inputs. Harder than photos/video, but still doable.
- skoskie 5y agoProps for the source AND page number. I’ve read it before but hadn’t recalled that detail about the randomized layout. TIL!
- briansbum 5y agoWayback Machine Link: https://web.archive.org/web/20210804092439/https://www.unite.ai/master-faces-that-can-bypass-over-40-of-facial-id-authentication-systems/ https://web.archive.org/web/20210804092439/https://www.unite...
- 50kIters 5y agoWhy? The site is up.
- LeoPanthera 5y agoYou can’t archive it after it goes down.
- 50kIters 5y agoTypically you post an archive link if the site crumbles under a hug of death. If it's performing well, there's no need to defer to an archive link.
- jrootabega 5y agoThe motivation is probably that this could be taken down by initiation.
- jrootabega 5y agos/initiation/intimidation/ I hate how phones have made posts on the web so incomprehensible, but I usually double check
- peteretep 5y ago> That Can Bypass Over 40% Of Facial ID Authentication Systems Turns out to actually mean "three CNN-based face descriptors: SphereFace, FaceNet and Dlib", which best I can tell are two academic projects and an open-source library. By far the largest deployed facial authentication system is of course Face ID, which this has zero/zilch/no chance at all of working against. What a terrible, terrible headline.
- diegoperini 5y agoSo the mentioned 40% is a lie? Otherwise the headline seems accurate.
- peteretep 5y agoAlso the description "facial ID authentication systems". An accurate headline would be "we were able to confuse some open-source face recognition systems"
- wishawa 5y agoThey're beating facial recognition systems, not facial authentication systems.
- lmilcin 5y agoIt is practically the same assuming the output from facial recognition is then fed as input to authentication.
- noduerme 5y agoI love how Israel isn't afraid to publicly demolish the same security systems it pioneered and that its adversaries are probably investing heavily in at the moment. Last month it was the nanotech camouflage that bent light... I'm sure the Iranian fork of that project has since been tabled. Now all we really need to do is print copies of these faces and drop em all over China.
- rbanffy 5y agoOTOH, there is a 40% chance this face is on the top 10 most wanted terrorist list... Or, at least, that's what the ED-209 in the corridor will think.
- wishawa 5y agoAnother important question is is it really a magic face they found, or just a magic image of a random face? If they managed to build an adversarial GANs that work on the object rather than a digital image of one that would be interesting enough on it own.
- nl 5y agoDLib is a facial feature extractor that extracts 68 keypoints. I've used DLib very extensively in the wild. It's fast, has decent python integration and is easy to use. But it get confused pretty easily. I've had even the CNN model confuse a blurry photo of a clock for a face. It's useful enough to build facial recognizers that mostly work ok. But if you are using it for a facial authentication system... it's a pretty bad idea to say the least.
- gverrilla 5y ago>including various brands of the Differential Evolution heuristic. Can someone tell me more about this? What various "brands"? I know only the scipy package.
- rusticpenn 5y agoDifferential Evolution is just a meta heuristic algorithm. There are several variations of it. ( not unlike the many variations of Genetic algorithm or PSO).
- gverrilla 5y agoI see! And why is there only one scipy version available for python (for what I know)? Maybe because it's simple enough that the variations can be included by simply tweaking a few settings/lines? Thanks for your answer! For context, my cofounder asked me to implement scipy.DE, and I have walked him through each line of the scipy.DE but atm I don't know much about the underlying maths (we're building a proof of concept and I'm not a professional programmer).
- rusticpenn 5y agoThe mathematics is pretty simple ( I think wikipedia should give you more than enough information). Its easy to make your own implementation in 100 lines of python code (and make the corresponding variations).
- phelm 5y agoThe equivalent of some people having ‘one of those faces’ that look familiar and recognisable
- ajb 5y agoThis seems to indicate that the authentication system is using a binary comparison "is this face the same as that face" for each stored face. But why would it not do instead "which is the nearest face to this"? Surely you can't find one face which is the nearest to 40% of the DB? (unless this is yet another counterintuitive feature of high-dimensional geometry)
- hansvm 5y ago> unless this is yet another counterintuitive feature of high-dimensional geometry As it turns out, that _is_ another feature of high-dimensional geometry. The details depend on how many dimensions your images have, the similarity metric being used, how big your database, is, .... For a brief illustration, consider standard euclidean space. If your images have D dimensions, ignoring some pathological cases you can find a point equidistant from D+1 of them (and if you have more dimensions to work with you have a lot of points to choose from). If D+1 < (40% of database) then you've accomplished your goal. Note: It is possible for such a point to be arbitrarily far from the rest of your database (in context, that it would look nothing like a face). Spare dimensions can give you enough freedom to place it "in the middle" of your database in some sense, not just some point in the middle of nowhere that's an equally bad match for everything.