4 ms·
Depends on your threat analysis. If you're not considering an active attacker who has an ability to seamlessly fake voice and/or face to be a realistic attack s
by drdaeman 3y ago
Depends on your threat analysis. If you're not considering an active attacker who has an ability to seamlessly fake voice and/or face to be a realistic attack scenario (e.g. you're guarding against mass surveillance, but not a prepared targeted attack - i.e. you don't find it plausible that someone has prepared actors - human or machine - with quality deepfakes made specially for you and your peer) and you know the other party personally, you can verify in-band, relying on natural biometrics aka your knowledge of one's voice and face. If you do - certainly the verification must be done out-of-band.
- deleted 3y ago[deleted]
- throwaway092323 3y agoI can't imagine what it would be like to actually have to deal with the scenario you described.
- 0xDEAFBEAD 3y agoCustomized deepfake attacks are definitely happening: https://www.npr.org/2023/03/22/1165448073/voice-clones-ai-scams-ftc https://www.npr.org/2023/03/22/1165448073/voice-clones-ai-sc... https://www.forbes.com/sites/thomasbrewster/2021/10/14/huge-bank-fraud-uses-deep-fake-voice-tech-to-steal-millions/ https://www.forbes.com/sites/thomasbrewster/2021/10/14/huge-... My thinking is, you might as well get in the habit of defending yourself now. The alternative is to monitor how widespread the attack is and only adjust your policy once it becomes "sufficiently" widespread. But I don't think that's even a labor savings, since defending yourself isn't actually that hard.