4 ms·

Some banks needs photos of machine readable IDs to verify user details to fight fraud. These IDs can be passports or NFC enabled EU (and compatible) ID cards.

Some banks needs photos of machine readable IDs to verify user details to fight fraud. These IDs can be passports or NFC enabled EU (and compatible) ID cards. This will allow banks to trust these cameras more on the long run, allowing higher security ID checks.

rickdeckard 16d ago
Okay, this doesn't answer the question on the vector but is another interesting example. Let's expand on that one then: Banks are offloading the trusted process of ID verification to an untrusted entity (end-user, merchant,...) and compensate for the loss of security by using a trusted service-provider (now Apple AND an iPhone 18 Pro). This is already happening today in two scenarios: 1. lower-risk scenarios (remotely) with trusted 3rd party service-providers and very low Hardware-requirements ("use this app on your phone to take a picture/video") and 2. higher-risk scenarios (on-site) with trusted 3rd party service-providers ("use THIS expensive device to take a picture/video of the customer/citizen") Apple now potentially disrupts the service-provider industry of #2 (higher-risk scenarios) by #a grabbing a part of this hardware/service market that MAY allow the end-user to be in control of the device and #b replacing the on-site hardware/service with an iPhone "in a box". They can't disrupt #1 because their cost-saving can't mandate the end-user to buy a 1000+ USD device just for THEM to provide the contracted service. (They can add convenience if you have it, but they can't reject their service if you don't) Which means they disrupt mainly #2: The industry providing trusted imaging solutions for higher-risk scenarios. --> So it's the Watch Ultra game all over again. On Watch Ultra they disrupted the diving-watch market by the sheer scale of selling their development to everyone buying a Watch Ultra, driving down the cost so much that they can undercut every diving-watch company on the market. Now they use the sheer scale of iPhone 18 Pro sales to enter the trusted-imaging market-segment, undercutting every player there and take that market.
- bayindirh 16d ago
  Don't forget law enforcement, customs or any high(ish) stakes sector which needs to be able to trust the images they show as evidence as well. Back in the day Canon and Nikon tried this with embedded private keys on their cameras, and with Sandisk's WORM SD cards. Then, somebody extracted the keys and it was game over. While my iPhone 17 can't match a full frame mirrorless camera, it can take pretty impressive photos, so they are already more than adequate in detail and clarity department. So making these images trusted is a huge win for them.
lxgr 16d ago
ID document verification via NFC can't by itself replace also biometrically verifying the person purporting to be the one that the document belongs to. Without it, anyone with a stolen document can pass it. (I don't think there's a generally available database of stolen documents, so I suspect these usually remain valid until their regular date of epxiry.)
- bayindirh 16d ago
  Generally, the information in our country is checked via multiple ways: NFC + Biometric data (checked against the data inside the ID card) (+ photo of the ID in some cases), or any combination of those. Before deepfakes were dime a dozen, I remember my bank starting a video-call with me and required me to show my ID to them via camera. This was after a multi-factor check that I passed. Making any of these factors more trustworthy is a win in my perspective, so having a trusted sensor is always better even if you do multi-factor authentication. Our ID cards have a private-public key pair inside them, and it allows us to sign things amongst other things. Renewing your ID card for any reason revokes the digital signature of the previous one, so scanning it via NFC probably enough to check whether it's revoked. Same with photo (since machine readable part contains serial and check digits and such).

rickdeckard 16d ago

Okay, this doesn't answer the question on the vector but is another interesting example. Let's expand on that one then: Banks are offloading the trusted process of ID verification to an untrusted entity (end-user, merchant,...) and compensate for the loss of security by using a trusted service-provider (now Apple AND an iPhone 18 Pro). This is already happening today in two scenarios: 1. lower-risk scenarios (remotely) with trusted 3rd party service-providers and very low Hardware-requirements ("use this app on your phone to take a picture/video") and 2. higher-risk scenarios (on-site) with trusted 3rd party service-providers ("use THIS expensive device to take a picture/video of the customer/citizen") Apple now potentially disrupts the service-provider industry of #2 (higher-risk scenarios) by #a grabbing a part of this hardware/service market that MAY allow the end-user to be in control of the device and #b replacing the on-site hardware/service with an iPhone "in a box". They can't disrupt #1 because their cost-saving can't mandate the end-user to buy a 1000+ USD device just for THEM to provide the contracted service. (They can add convenience if you have it, but they can't reject their service if you don't) Which means they disrupt mainly #2: The industry providing trusted imaging solutions for higher-risk scenarios. --> So it's the Watch Ultra game all over again. On Watch Ultra they disrupted the diving-watch market by the sheer scale of selling their development to everyone buying a Watch Ultra, driving down the cost so much that they can undercut every diving-watch company on the market. Now they use the sheer scale of iPhone 18 Pro sales to enter the trusted-imaging market-segment, undercutting every player there and take that market.

bayindirh 16d ago
Don't forget law enforcement, customs or any high(ish) stakes sector which needs to be able to trust the images they show as evidence as well. Back in the day Canon and Nikon tried this with embedded private keys on their cameras, and with Sandisk's WORM SD cards. Then, somebody extracted the keys and it was game over. While my iPhone 17 can't match a full frame mirrorless camera, it can take pretty impressive photos, so they are already more than adequate in detail and clarity department. So making these images trusted is a huge win for them.

lxgr 16d ago

ID document verification via NFC can't by itself replace also biometrically verifying the person purporting to be the one that the document belongs to. Without it, anyone with a stolen document can pass it. (I don't think there's a generally available database of stolen documents, so I suspect these usually remain valid until their regular date of epxiry.)

bayindirh 16d ago
Generally, the information in our country is checked via multiple ways: NFC + Biometric data (checked against the data inside the ID card) (+ photo of the ID in some cases), or any combination of those. Before deepfakes were dime a dozen, I remember my bank starting a video-call with me and required me to show my ID to them via camera. This was after a multi-factor check that I passed. Making any of these factors more trustworthy is a win in my perspective, so having a trusted sensor is always better even if you do multi-factor authentication. Our ID cards have a private-public key pair inside them, and it allows us to sign things amongst other things. Renewing your ID card for any reason revokes the digital signature of the previous one, so scanning it via NFC probably enough to check whether it's revoked. Same with photo (since machine readable part contains serial and check digits and such).