Face ID beaten by mask

Re:Face ID beaten by mask by positivecomment on Monday November 13, 2017 @06:34AM (#15685734)

> Because... we are the leading cyber security firm ;)

But you don't even use HTTPS. Why?

[ Parent | on HN ]

Re:Face ID beaten by mask by amelius on Monday November 13, 2017 @07:40AM (#15686036)

Because the information was meant to be public anyway?

[ Parent | on HN ]

Re:Face ID beaten by mask by kbart on Monday November 13, 2017 @07:44AM (#15686056)

Their "download" page is also HTTP which is a bit more concerning. Pretty sloppy for a company that provides security tools imho.

[ Parent | on HN ]

Re:Face ID beaten by mask by borplk on Monday November 13, 2017 @08:55AM (#15686518)

There are countless other benefits to having HTTPS (such as ensuring the end-to-end integrity of the communication so stuff can't be injected in the document). It's not meant only for private information.

[ Parent | on HN ]

Re:Face ID beaten by mask by syncsynchalt on Monday November 13, 2017 @11:02AM (#15687393)

Not using https means that your ISP, your mobile carrier, or your airport network provider can modify the information being presented to you. This is not a hypothetical, it happens all the time (though usually just to inject ads).

It's not about whether the provider wants the information to be public, it's about whether the provider wants the information to arrive intact.

[ Parent | on HN ]

Re:Face ID beaten by mask by positivecomment on Monday November 13, 2017 @07:52AM (#15686119)

This is the infamous "nothing to hide" argument in a different form.

[ Parent | on HN ]