4 ms·

One of the first things I noticed is "Avoid Face Unlock." Their rationale is: > there are numerous ways to fool it and gain access to the device, through digit

One of the first things I noticed is "Avoid Face Unlock." Their rationale is: > there are numerous ways to fool it and gain access to the device, through digital photos and reconstructions from CCTV footage. The words "fool it" link to a four year old Forbes article that doesn't actually describe any successful attacks in detail. I'm not saying that there aren't successful attacks (there are, particularly for devices that rely entirely on a front-facing camera), but I find the lack of nuance here to be unhelpful. A cheap smartphone that just uses its front-facing camera for facial recognition is not the same thing as a high-end smartphone that incorporates a depth sensor, and this list should communicate that clearly and link to more relevant information. (Like actual, successful attacks on facial recognition systems.)

autoexec 5y ago
Facial recognition has a long history of attacks, poorly designed implementations, and abuses. You can avoid every one of those problems (past, current, and future) by just not using it. It doesn't matter if you've got a cheap cell phone or the newest thing off the line, attacks will evolve as technology patches up old problems. Sources and links to more detailed info isn't a bad idea, but specific examples will be outdated much more quickly than the general advice will remain relevant.
- NavinF 5y ago
  The alternative is a pin that anyone can watch you type in. “gain access to the device, through digital photos and reconstructions from CCTV footage” is a hell of a lot harder than reconstructing a pin from CCTV footage ;)
  - autoexec 5y ago
    > The alternative is a pin that anyone can watch you type in. If they're standing directly over your shoulder sure, but you show your face to far more people. You may also be able to have your phone scramble the order of the numbers to make it harder for people to know your pin, or use gestures to unlock your device. You can also reset you pin far easier than you can reset your face. face recognition can work even if you're asleep, unconscious, or dead too, but nobody can ask you for a pin in that situation.

autoexec 5y ago

Facial recognition has a long history of attacks, poorly designed implementations, and abuses. You can avoid every one of those problems (past, current, and future) by just not using it. It doesn't matter if you've got a cheap cell phone or the newest thing off the line, attacks will evolve as technology patches up old problems. Sources and links to more detailed info isn't a bad idea, but specific examples will be outdated much more quickly than the general advice will remain relevant.

NavinF 5y ago
The alternative is a pin that anyone can watch you type in. “gain access to the device, through digital photos and reconstructions from CCTV footage” is a hell of a lot harder than reconstructing a pin from CCTV footage ;)
- autoexec 5y ago
  > The alternative is a pin that anyone can watch you type in. If they're standing directly over your shoulder sure, but you show your face to far more people. You may also be able to have your phone scramble the order of the numbers to make it harder for people to know your pin, or use gestures to unlock your device. You can also reset you pin far easier than you can reset your face. face recognition can work even if you're asleep, unconscious, or dead too, but nobody can ask you for a pin in that situation.