News for hackers. Stuff that matters.
Re:Accounts with GAN Faces Attack Belgium over 5G Restrictions by jacquesm on Tuesday February 02, 2021 @02:15PM (#26005239)
No, trust is a very easy problem. Online trust with people that you have not had any previous real life contact with is a hard problem. Which is why I still put a premium on meeting people irl.
Re:Accounts with GAN Faces Attack Belgium over 5G Restrictions by vngzs on Tuesday February 02, 2021 @02:49PM (#26005657)
I suppose it should be clear from context that I meant online, but I'd like to offer some food for thought around offline trust as well.

In 2009, a man arrived at the world-famous Sun Studio in Memphis, TN for a private tour. He told David Brookings, the young, aspiring musician giving the private tour, that his name was Steve Eason. David had been briefed that Eason was a big figure in the music industry, very famous, and so Sun would have to be very careful to preserve his privacy. Eason was also darn ill; he'd been hooked up to some gear that followed him around the studio.

The kid had never heard of Steve Eason, but he gave a passionate tour. At the end, David handed Steve a CD with music on it, hoping to land a record deal. A month later, Brookings got a message from Apple, asking him to come join iTunes to curate Rock & Roll playlists.

And Steve Eason? He wasn't a musician, or even a record producer. The man receiving the Sun Studio tour was Steve Jobs, who had been in Memphis to receive a kidney transplant for pancreatic cancer. He was staying in a house bought by a man named Eason, but Eason was - in fact - the doctor Jobs had scheduled to perform the transplant surgery.

Brookings has worked at Apple to this day.

In truth, more people go by alias names than you'd expect. Without checking a driver's license (and, depending on the sensitivity, maybe some utility bills), you may never know if someone is who they say they are.

Also, I have friends I've met offline, who have moved around to different countries and swapped devices. It's always a big pain trying to establish trust once your physical relationships go digital. There are only so many challenge-response questions to ask them (i.e., things only the two of you know). In reality, our digital and offline lives are intermingled; they each inseparably affect the other, and sometimes it feels like identity problems are turtles all the way down.

Re:Accounts with GAN Faces Attack Belgium over 5G Restrictions by jacquesm on Tuesday February 02, 2021 @03:03PM (#26005833)
Identity and trust are not necessarily 100% congruent. There are plenty of people who I trust whose identity I would not vouch for and there are many more whose identity I am sure of but who I would not trust.
Re:Accounts with GAN Faces Attack Belgium over 5G Restrictions by tomp on Tuesday February 02, 2021 @03:21PM (#26006092)
Trust is the main problem people are trying to solve when hiring. Before 2020 most of my interviews were done in person, so even with IRL meetings it's a hard problem.
Re:Accounts with GAN Faces Attack Belgium over 5G Restrictions by jacquesm on Tuesday February 02, 2021 @03:41PM (#26006330)
This usually boils down to references and then by extension the trust in those references. It is definitely tricky, before COVID we would fly in new hires to meet them and talk to them, since then we have only hired one new person and only because one of our team has a prior relationship with that person so we can extend our trust.