5 ms·

Had my creepiest-ever encounter with face recognition recently. I was traveling home from our first international trip since The Before Times. The country we t

by ftio 5y ago

Had my creepiest-ever encounter with face recognition recently. I was traveling home from our first international trip since The Before Times. The country we traveled from has a US Customs office in the airport. We walk up to the counter, look into the camera, and without having handed over my passport, the agent says my name. I know that I've given them my photo and that the search space for my match isn't huge (people on flights leaving in the next ~2-8 hours), but it absolutely freaked me out. I can't imagine it meaningfully makes us more secure, and it feels like the kind of thing that, to this article's point, could be trivially abused.

gumby 5y ago
You weren't greeted as a convenience but as a form of intimidation.
- pope_meat 5y ago
  "hello, citizen #4838428069, we know who you are, now hand over the identification paperwork to prove to us who you are" ...wait a minute
  - bserge 5y ago
    "Pick up that can"
- autoexec 5y ago
  I agree, but I prefer it when they're at least upfront about it. It's much better than just silently collecting your data and then using it against it you in ways you'll never know or be able to trace back even if it's suspected. If my health insurance premiums rise suddenly, it'd take a whistleblower for me to discover that it was because my face was flagged more often at fast-food counters or bars.
jackson1442 5y ago
I wonder if they maybe used a long-range RFID reader to read the chip in your passport and matched it against your face.
- flemhans 5y ago
  The contents of the chip is encrypted with the machine-readable text on the picture page, so you cannot harvest people's data like that without opening the passport.
  - romeovs 5y ago
    But nothing is stopping the US customs service (or any other service) to store the unencrypted data for later reference right? I don’t find it farfetched that some big players would have a database that holds basically a huge lookup table that goes from encrypted data to the unencrypted data. This wouldn’t work on your first visits, but return visitors could have their rfid read like that. Or do the rfid chips hold some kind of randomness in them so they can do a type of handshake (that is unique every time) where that machine readable password is needed?
ladberg 5y ago
I visited China with someone who was from China but had been living in the US. It was a hot day and at one point I wanted cold water (which turns out is a very western thing and hard to get elsewhere) and the only option was a vending machine. I expected at first to pay with coins, WeChat, or AliPay but she just showed her face to the camera on the vending machine and it charged it to her bank account. She didn't have to enter a PIN or show identity and the only device she had on her was a US-bought iPhone with no cell service. I was blown away that not only was a camera able to identify her out of the probably hundreds of millions of people enrolled in the system, but it was confident enough to actually charge money to her account. I still think about that to this day and tell people about it when they talk about the level of tech in the US.
- bserge 5y ago
  I'd say you got pranked, but that may be wishful thinking. Yeah, I don't think that system is "confident enough". Just that the error rate is acceptable. Some poor sod gets charged instead of you? Welp, tough luck. Pretty terrible.
  - wcoenen 5y ago
    Not a prank. https://www.theguardian.com/world/2019/sep/04/smile-to-pay-chinese-shoppers-turn-to-facial-payment-technology https://www.theguardian.com/world/2019/sep/04/smile-to-pay-c...
    - bserge 5y ago
      And people sign up for it voluntarily... Just wow
      - risyachka 5y ago
        Why wouldn't they? Their faces are probably many years already in government face recognition systems. Also they don't have much of a choice anyway with CCP. At least they get some extra convenience because of it.
syshum 5y ago
The ACLU Pizza video [1] from several years ago is a classic, but we continue to march ever slowly to that reality, few people seem to mind. [1] https://www.aclu.org/ordering-pizza https://www.aclu.org/ordering-pizza
fidesomnes 5y ago
> I can't imagine it meaningfully makes us more secure, I can't imagine letting you in charge of a customs office security. > but it absolutely freaked me out and it feels like the kind of thing that, to this article's point, could be trivially abused. Okay Karen, go ahead and trivially abuse it and write back with your findings. I'll wait.

by ftio 5y ago

gumby 5y ago

You weren't greeted as a convenience but as a form of intimidation.

pope_meat 5y ago
"hello, citizen #4838428069, we know who you are, now hand over the identification paperwork to prove to us who you are" ...wait a minute
- bserge 5y ago
  "Pick up that can"
autoexec 5y ago
I agree, but I prefer it when they're at least upfront about it. It's much better than just silently collecting your data and then using it against it you in ways you'll never know or be able to trace back even if it's suspected. If my health insurance premiums rise suddenly, it'd take a whistleblower for me to discover that it was because my face was flagged more often at fast-food counters or bars.

jackson1442 5y ago

I wonder if they maybe used a long-range RFID reader to read the chip in your passport and matched it against your face.

flemhans 5y ago
The contents of the chip is encrypted with the machine-readable text on the picture page, so you cannot harvest people's data like that without opening the passport.
- romeovs 5y ago
  But nothing is stopping the US customs service (or any other service) to store the unencrypted data for later reference right? I don’t find it farfetched that some big players would have a database that holds basically a huge lookup table that goes from encrypted data to the unencrypted data. This wouldn’t work on your first visits, but return visitors could have their rfid read like that. Or do the rfid chips hold some kind of randomness in them so they can do a type of handshake (that is unique every time) where that machine readable password is needed?

ladberg 5y ago

I visited China with someone who was from China but had been living in the US. It was a hot day and at one point I wanted cold water (which turns out is a very western thing and hard to get elsewhere) and the only option was a vending machine. I expected at first to pay with coins, WeChat, or AliPay but she just showed her face to the camera on the vending machine and it charged it to her bank account. She didn't have to enter a PIN or show identity and the only device she had on her was a US-bought iPhone with no cell service. I was blown away that not only was a camera able to identify her out of the probably hundreds of millions of people enrolled in the system, but it was confident enough to actually charge money to her account. I still think about that to this day and tell people about it when they talk about the level of tech in the US.

bserge 5y ago
I'd say you got pranked, but that may be wishful thinking. Yeah, I don't think that system is "confident enough". Just that the error rate is acceptable. Some poor sod gets charged instead of you? Welp, tough luck. Pretty terrible.
- wcoenen 5y ago
  Not a prank. https://www.theguardian.com/world/2019/sep/04/smile-to-pay-chinese-shoppers-turn-to-facial-payment-technology https://www.theguardian.com/world/2019/sep/04/smile-to-pay-c...
  - bserge 5y ago
    And people sign up for it voluntarily... Just wow
    - risyachka 5y ago
      Why wouldn't they? Their faces are probably many years already in government face recognition systems. Also they don't have much of a choice anyway with CCP. At least they get some extra convenience because of it.

syshum 5y ago

The ACLU Pizza video [1] from several years ago is a classic, but we continue to march ever slowly to that reality, few people seem to mind. [1] https://www.aclu.org/ordering-pizza https://www.aclu.org/ordering-pizza

fidesomnes 5y ago

> I can't imagine it meaningfully makes us more secure, I can't imagine letting you in charge of a customs office security. > but it absolutely freaked me out and it feels like the kind of thing that, to this article's point, could be trivially abused. Okay Karen, go ahead and trivially abuse it and write back with your findings. I'll wait.