News for hackers. Stuff that matters.
Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @02:19AM (#17203005)
Clustering images by features seems to be pretty fundamental, and if it runs afoul of this law, then the law needs to be changed.

I upload photos to Google Photos because I want them to be grouped and categorized so I can easily find them. That is, if I click on a picture of my daughter, or my wife, I want to see ALL pictures of I took of them grouped together.

Looking at the text of the law itself, it seems to exclude photographs, here's the relevant section:

" (740 ILCS 14/10) Sec. 10. Definitions. In this Act: "Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color."

I'm not really sure what they mean by "face geometry" whereas at the same time, excluding photographs. Does this mean if my service measures the distance between the eyes, and the width of the mouth, and clusters photos by that, or by eye or hair color by using say, segmentation or histogram clustering, all of a sudden it's illegal? That would seem to be a fairly absurd and broad definition of biometric security information.

In theory, I suppose, the computation of the features, could be done on the client, and then have the features cloud-synced and replicated to all clients, but this would make for a shitty search experience, especially if the machine learning or feature extraction technique improvements overtime, and all of a sudden, you've got to download 20,000 photos and recompute everything on your phone.

Re:Facebook photo-scanning lawsuit could cost it billions by smadge on Friday June 01, 2018 @02:27AM (#17203038)
There’s a difference between offering facial recognition as a feature to users of the software and collecting biometric data as a additional revenue source. In one case the user owns their biometric data and is granting the company access to it for the limited use of tagging photos. In the other case the company owns the biometric data and is using it for god knows what.
Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @02:38AM (#17203086)
Where's the evidence Facebook is using it for a revenue source?
Re:Facebook photo-scanning lawsuit could cost it billions by RyanZAG on Friday June 01, 2018 @05:16AM (#17203773)
That's what court cases are about, and why we don't declare innocent or guilty before the verdict. The evidence (or lack of) will come up during the court proceedings, you'd expect.
Re:Facebook photo-scanning lawsuit could cost it billions by workinthehead on Friday June 01, 2018 @08:21AM (#17204594)
Semantic nitpick, we don't declare innocence, but only that guilt was not proven.
Re:Facebook photo-scanning lawsuit could cost it billions by sametmax on Friday June 01, 2018 @08:39AM (#17204715)
Not a nitpick, pretty fundamental IMO. This should be repeated over and over. People forget it every day.
Re:Facebook photo-scanning lawsuit could cost it billions by adanto6840 on Friday June 01, 2018 @10:03AM (#17205394)
As far as I'm aware or have ever been taught, they're one in the same -- "presumption of innocence until proven guilty".
Re:Facebook photo-scanning lawsuit could cost it billions by stordoff on Friday June 01, 2018 @01:36PM (#17207875)
They are not one and the same - there is still the _presumption_ of innocence when being found not guilty. Not guilty means that you were not _proven_ to be guilty, not that you have been proven to be innocent. You are equally not guilty even if it's pretty clear you did it but there is not quite enough prove, or if proven you didn't do it. You are free from liability under the law, but you are not necessarily factually innocent.

Incidentally, this is largely why Scots law verdicts of acquittal -- "not guilty" and "not proven" -- reflecting the two standards of not guilty. "Not proven" carries the implication that the jury is not convinced of the defendant's innocent, but there is not enough evidence for conviction.

Re:Facebook photo-scanning lawsuit could cost it billions by gowld on Friday June 01, 2018 @01:47PM (#17207996)
"there is still the _presumption_ of innocence" means that the law treats the accused as innocent, with an extra protection that re-trial is more restricted.
Re:Facebook photo-scanning lawsuit could cost it billions by stordoff on Friday June 01, 2018 @06:06PM (#17210862)
That's roughly what I'm saying - the law treats the accused as innocent, but it does not mean this person is _proven_ innocent. Legally, they are innocent, but there is no declaration made on whether the person is _factually_ innocent or not.
Re:Facebook photo-scanning lawsuit could cost it billions by workinthehead on Friday June 01, 2018 @11:10AM (#17206001)
Nope, your quote is irrelevant, and it's "one and the same" besides. Why do you think people are pronounced "guilty" or "not guilty"?
Re:Facebook photo-scanning lawsuit could cost it billions by Retric on Friday June 01, 2018 @12:28PM (#17207004)
Actually, because you can't be retried for the same crime you are in a very meaningful way declared though not found innocent.

A hung trial is closer in meaning to not being found guilty or innocent.

Arguably, a semantic difference does apply in that you may still be found liable in a civil case. However, civil cases don't declare people guilty only liable.

Re:Facebook photo-scanning lawsuit could cost it billions by workinthehead on Monday June 04, 2018 @12:19PM (#17229389)
That's just your opinion, and given you're not even a lawyer, it's worth about as much as the latest Ethereum ICO.
Re:Facebook photo-scanning lawsuit could cost it billions by coding123 on Friday June 01, 2018 @11:26AM (#17206173)
In a civil suit there is no guilty party. There may be a liable party.
Re:Facebook photo-scanning lawsuit could cost it billions by workinthehead on Friday June 01, 2018 @12:22PM (#17206916)
We aren't talking about civil suits though, are we?
Re:Facebook photo-scanning lawsuit could cost it billions by coding123 on Monday June 04, 2018 @03:22PM (#17231220)
Unless you're talking about something else, a lawsuit is a civil suit, at least in the united states.
Re:Facebook photo-scanning lawsuit could cost it billions by workinthehead on Friday June 08, 2018 @04:59AM (#17263728)
You're the only one here talking about civil suits. The rest of us were having a fairly intelligent conversation about guilty verdicts. I suggest you read more closely before you contribute next time.
Re:Facebook photo-scanning lawsuit could cost it billions by Ballantara on Friday June 01, 2018 @04:40AM (#17203602)
Whether it's a revenue source or not, fb still owns the biometric data and is using it for god knows what (and asking "evidence?" like this comes off as a way of avoiding the point)
Re:Facebook photo-scanning lawsuit could cost it billions by perl4ever on Friday June 01, 2018 @03:03AM (#17203196)
I have to admit, I don't intentionally upload photos to Google Photos because I want them categorized. It seemed to be the default on my phone, and it seems like a pretty neat feature when I noticed it, but the reason it's being used is because I'm too apathetic to prevent it.

It makes me kind of sad, not for the lack of privacy, but for the feeling of getting older and just not caring about fighting the technology to make it do what I want.

Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @03:59AM (#17203440)
If the core value proposition of a piece of software, that it's marketed for, is automatic photo organization, it kind of defeats to purpose to have to configure something to make it do what you want. Most people don't want to configure software, they want it to make their lives easier out of the box as much as possible.

If the only thing you care about is backup, Dropbox and other services offer that (e.g. Keepsafe). I use Google Photos because of peace of mind. I know I never have to worry about losing photos, and when I need to find them, it's easy. I've got like 20 years of photos backup. Just yesterday, I wanted to show someone a picture of my daughter from a trip we took in 2012, and I found it in about 5 seconds. When I take photos of my kids, they are automatically shared with my wife, instead of having to constantly manually be asked for them, and manually select them. I focus on just taking pictures and spending time with my kids, I never worry about photo backup, or photo organizing anymore.

Re:Facebook photo-scanning lawsuit could cost it billions by SiempreViernes on Friday June 01, 2018 @06:33AM (#17204097)
It seems you also use it mainly for backup?

Would you still use it if the grouping feature didn't save pictures it could not confidently group?

Re:Facebook photo-scanning lawsuit could cost it billions by Tyr42 on Friday June 01, 2018 @11:04AM (#17205921)
I mean, at some point you take the first photo of your kid. If it threw that away, then when you take the second photo, there's nothing to group with and it throws that away too.

Pretty useless if it throws away singleton sets.

Re:Facebook photo-scanning lawsuit could cost it billions by rayiner on Friday June 01, 2018 @01:33PM (#17207829)
> Clustering images by features seems to be pretty fundamental, and if it runs afoul of this law, then the law needs to be changed.

Analyzing peoples' biometric data from pictures of their faces is a special case.

> I upload photos to Google Photos because I want them to be grouped and categorized so I can easily find them.

So make it opt in. Most people just want to show their images to friends, not have Facebook analyze them.

Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @05:05PM (#17210295)
IIRC, it is opt-in for Google Photos (something like Photos -> Settings -> Group Faces), but that's you the uploader consenting, not the person whose's face it is opting in. The person in the photo need not even have an online presence at all, so there's no way to actually ask them for permission. (In FB's case, they can do it if the other person is a FB user)

What's your definition of biometric data? if I cluster by eye-color, is that biometric data? "Show me everyone with green eyes". Have a run afoul?

Re:Facebook photo-scanning lawsuit could cost it billions by CodeMage on Friday June 01, 2018 @02:04PM (#17208197)
> Clustering images by features seems to be pretty fundamental, and if it runs afoul of this law, then the law needs to be changed.

Fundamental to what, though? This court case is not about somehow criminalizing the existence or the use of this particular tech.

> I upload photos to Google Photos because I want them to be grouped and categorized so I can easily find them. That is, if I click on a picture of my daughter, or my wife, I want to see ALL pictures of I took of them grouped together.

Facebook is not Google Photos. The former is a social network, the latter is a service for storing, organizing and sharing photos. In my opinion, even Google Photos should implement a setting that disables this.

> Does this mean if my service measures the distance between the eyes, and the width of the mouth, and clusters photos by that, or by eye or hair color by using say, segmentation or histogram clustering, all of a sudden it's illegal? That would seem to be a fairly absurd and broad definition of biometric security information.

Come on, if you made the effort to read that part of the law, why did you stop there? No, it's not "suddenly illegal" to measure and gather that information. It's illegal to do without following certain rules about retention, destruction and usage of that information. It's in the very next section, here's an excerpt:

"(740 ILCS 14/15) Sec. 15. Retention; collection; disclosure; destruction.

(a) A private entity in possession of biometric identifiers or biometric information must develop a written policy, made available to the public, establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within 3 years of the individual's last interaction with the private entity, whichever occurs first. Absent a valid warrant or subpoena issued by a court of competent jurisdiction, a private entity in possession of biometric identifiers or biometric information must comply with its established retention schedule and destruction guidelines."

Re:Facebook photo-scanning lawsuit could cost it billions by saagarjha on Friday June 01, 2018 @05:13AM (#17203757)
There are ways to do clustering on-device without sending everything back to Facebook.
Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @05:38AM (#17203858)
Yes, but it doesn't scale as your photo collection scales up, since if the algorithm is updated, you need all the data on device to reprocess every photo.

You need something like CryptoDL: deep learning over homomorphic encryption, that would let the photos stay encrypted in the cloud, but still allow DL computations to be run.

Re:Facebook photo-scanning lawsuit could cost it billions by aikinai on Friday June 01, 2018 @05:55AM (#17203931)
Apple has the same functionality and does all processing locally, though I'm not sure if that's an argument for or against your assertion that it doesn't scale.

It does work, but it's not nearly as seamless as Google's cloud implementation. I have many tens of thousands of photos in my Apple Photos library and I think it takes over a month to process everything if I start from scratch on a new computer. Somehow it seems much faster on the phone, and I'm not sure if that's because the processing is better hidden from me, it's much more efficient on the custom chip, or maybe a bit of both.

Re:Facebook photo-scanning lawsuit could cost it billions by jsjohnst on Friday June 01, 2018 @09:36AM (#17205138)
> I'm not sure if that's because the processing is better hidden from me, it's much more efficient on the custom chip, or maybe a bit of both.

The later, a bit of both. It’s also probable that your phone is turned on and plugged in more often than your computer (especially for laptops).

Re:Facebook photo-scanning lawsuit could cost it billions by toomuchtodo on Friday June 01, 2018 @10:37AM (#17205656)
Regardless of how it's done, I treasure my iPhone performing the facial recognition of my Photos library locally (10+ years of photos) as I continue to extricate my data from Google services.
Re:Facebook photo-scanning lawsuit could cost it billions by personjerry on Friday June 01, 2018 @05:57AM (#17203941)
That's a problem for the big software companies, not for the consumer. Namely, to optimize for on-device training and patches.
Re:Facebook photo-scanning lawsuit could cost it billions by cromwellian on Friday June 01, 2018 @06:29AM (#17204083)
The problem isn't ondevice training. The problem is, if I "free up space" by deleting my local copy, and I have 10 years of photos backed up in the cloud, then an update to the ML model requires redownloading all of those photos and running the inference on them.

It doesn't matter how clever you are: if you disallow processing the photos on the server, then any index you have on the client that is cached will be invalidated by an algorithm update, and there is no way to rebuild the index without downloading all the photos once again.

I'm not talking about federated learning, that's a different problem. Let's say we solved that problem using on-device learning and differential privacy. The problem still remains that retrained/updated models on devices require the photos to be processed locally again.

So if for example, you can now detect "hugs" in photos, and I search for "photos of my me hugging my daughter", Google Photos gives me what I want, and your local-only model means I have to wait a long time to redownload and reindex my entire collection. It's a huge user problem.

A workable solution to this problem has to somehow entail homomorphic encryption, if you somehow want to keep the photos encrypted on the server.

Re:Facebook photo-scanning lawsuit could cost it billions by reaperducer on Friday June 01, 2018 @11:33AM (#17206262)
Doesn't seem to be a problem on the iPhone. But then I usually search on "cats" and it gives me the option of "adult cats" or "kittens".

But it certainly works on large libraries because it shows me recent photos mixed with cats that died years ago.

Re:Facebook photo-scanning lawsuit could cost it billions by s73v3r_ on Friday June 01, 2018 @01:16PM (#17207608)
"Clustering images by features seems to be pretty fundamental, and if it runs afoul of this law, then the law needs to be changed."

Absolutely not. Companies should not be able to do this without explicit opt in. They need to learn that they are not free to do whatever they want, whenever they want, users be damned.

Re:Facebook photo-scanning lawsuit could cost it billions by morgosmaci on Friday June 01, 2018 @01:35PM (#17207854)
But who has to opt in, the person taking the picture, the person uploading the picture, any and all people in the picture?
Re:Facebook photo-scanning lawsuit could cost it billions by Retric on Friday June 01, 2018 @12:38PM (#17207118)
A photo provides a "scan of hand or face geometry" so that seems directly relevant.