4 ms·

Serendipitously over the weekend I was thinking about a future where for key sensitive data access (e.g. production main) you may need to have a quick 5 minute

Serendipitously over the weekend I was thinking about a future where for key sensitive data access (e.g. production main) you may need to have a quick 5 minute call (4th factor, "3D verification") where you would be asked to turn on your camera and be asked to answer some simple question and in different positions... Main thinking was how out of control it would get, it would probably end up looking like anti-cheat systems where its a constant cat and mouse game due to growing sophistication of deep fake models.

phpnode 4y ago
in the UK this is already relatively common for online banking. I asked my bank to raise my daily transfer limit the other day for a property purchase and part of the process was recording a video of myself in their app.
- ghaff 4y ago
  And, of course, as barriers are raised it makes it very difficult for some portion of the population (and less convenient for everyone else). I have to change addresses for an older person at a couple of banks and I'm sure it's going to be a nightmare.
  - couchand 4y ago
    That being said, if instead of "use our custom app you've never seen to record a video" it's "just talk to a person with some standard video chat" then maybe it makes things a whole lot easier? But I don't see that being how it's implemented these days...
    - ghaff 4y ago
      Yeah. It's still going to be a barrier for some people but I'm guessing most could get comfortable with it if they were forced to. But getting my dad to do anything that isn't a voice call is pretty much pulling teeth. (Except for using Amazon. I think a lot of things are more don't want to than can't.))
function_seven 4y ago
> Main thinking was how out of control it would get… From a job listing, circa 2024: - Job may require occasional lifting. (No more than 20kg) - Expected to travel up to 25% of the year. - Proprietary access control requires users be able to do handstands and/or simple juggling. (Feats subject to change) - EEOC employer.
comboy 4y ago
We have PK cryptography you know, yubikeys and such.
- couchand 4y ago
  Yubikeys can be stolen... I take it from the GP's description the access is sensitive enough to require more assurance than that.
  - dguest 4y ago
    I assume the other problem is that public key infrastructure doesn't exist in a lot of places, whereas (almost) everyone has a webcam. I had the same thought as many on this thread: all biometric identification is basically an arms race that moves along as new ways of gathering biometrics become convenient and ways of faking them are developed. But as you say, yubikeys also have problems. At some point it will probably be a hybrid, e.g. require a known acquaintance to digitally sign a video where you appear together.
- ErikCorry 4y ago
  You need some way to activate the yubikey. That could well be an online interview.
BHSPitMonkey 4y ago
This is already a thing multiple vendors provide, e.g. https://www.idnow.io/products/idnow-videoident/ https://www.idnow.io/products/idnow-videoident/ (used for use cases like banking and electronic contract signing)

phpnode 4y ago

in the UK this is already relatively common for online banking. I asked my bank to raise my daily transfer limit the other day for a property purchase and part of the process was recording a video of myself in their app.

ghaff 4y ago
And, of course, as barriers are raised it makes it very difficult for some portion of the population (and less convenient for everyone else). I have to change addresses for an older person at a couple of banks and I'm sure it's going to be a nightmare.
- couchand 4y ago
  That being said, if instead of "use our custom app you've never seen to record a video" it's "just talk to a person with some standard video chat" then maybe it makes things a whole lot easier? But I don't see that being how it's implemented these days...
  - ghaff 4y ago
    Yeah. It's still going to be a barrier for some people but I'm guessing most could get comfortable with it if they were forced to. But getting my dad to do anything that isn't a voice call is pretty much pulling teeth. (Except for using Amazon. I think a lot of things are more don't want to than can't.))

function_seven 4y ago

> Main thinking was how out of control it would get… From a job listing, circa 2024: - Job may require occasional lifting. (No more than 20kg) - Expected to travel up to 25% of the year. - Proprietary access control requires users be able to do handstands and/or simple juggling. (Feats subject to change) - EEOC employer.

comboy 4y ago

We have PK cryptography you know, yubikeys and such.

couchand 4y ago
Yubikeys can be stolen... I take it from the GP's description the access is sensitive enough to require more assurance than that.
- dguest 4y ago
  I assume the other problem is that public key infrastructure doesn't exist in a lot of places, whereas (almost) everyone has a webcam. I had the same thought as many on this thread: all biometric identification is basically an arms race that moves along as new ways of gathering biometrics become convenient and ways of faking them are developed. But as you say, yubikeys also have problems. At some point it will probably be a hybrid, e.g. require a known acquaintance to digitally sign a video where you appear together.
ErikCorry 4y ago
You need some way to activate the yubikey. That could well be an online interview.

BHSPitMonkey 4y ago

This is already a thing multiple vendors provide, e.g. https://www.idnow.io/products/idnow-videoident/ https://www.idnow.io/products/idnow-videoident/ (used for use cases like banking and electronic contract signing)