4 ms·
Of course there is. That’s how you avoid replay attacks.
by elzbardico 5y ago
Of course there is. That’s how you avoid replay attacks.
- Nextgrid 5y agoCan't you "replay" that data physically by creating a face mask matching the captured data and then presenting it to a legitimate sensor? IMO the security of the system is that the 3D face data is reasonably secret (you probably can't reconstruct it from a single picture, you'd need pictures from all angles) and the SOC only allows a few attempts before falling back to passcode. If you have the face data, you don't need to tamper with the hardware, and if you don't have that data then tampering with the sensor won't get you anywhere.
- elzbardico 5y agoExactly because you could have a fake camera that could collect your info and make it accessible for an installed app that would upload it for an hostile server. The original camera doesn’t give you access to this data, a counterfeited one possibly could.
- danuker 5y agoThat is absurd. What data is to a face, other than its appearance from various angles? That can be obtained from photos of the person.
- imajoredinecon 5y agoIn that case, why not allow a camera replacement with a factory reset?