News for hackers. Stuff that matters.
Re:To uncover a deepfake video call, ask the caller to turn ... by SoftTalker on Monday August 08, 2022 @12:17PM (#32387464)
Last time I applied for a credit card online, they asked me to take a video of myself and turn my head from side to side.
Re:To uncover a deepfake video call, ask the caller to turn ... by nanomonkey on Monday August 08, 2022 @12:44PM (#32387831)
This sounds like a great way to get sufficient images/video of you to create a deepfake that could pass this test. Hmmm...
Re:To uncover a deepfake video call, ask the caller to turn ... by oconnor663 on Monday August 08, 2022 @01:09PM (#32388204)
New mandatory security rule: Employees must never turn their heads side to side in a meeting.
Re:To uncover a deepfake video call, ask the caller to turn ... by mirkules on Monday August 08, 2022 @01:30PM (#32388462)
Microsoft Teams developed a feature when if you’re using a background and turn sideways, your nose and the back of your head are automatically cut off.

Bug closed, no longer an issue, overcome by events.

Re:To uncover a deepfake video call, ask the caller to turn ... by cratermoon on Monday August 08, 2022 @02:11PM (#32388967)
Interesting that you bring that up. The most egregiously invasive student and employee monitoring software requires that the subject always face the camera. That seems most ripe for bypassing with the current state of deepfakes. https://www.wired.com/story/student-monitoring-software-priv...
Re:To uncover a deepfake video call, ask the caller to turn ... by throwaway284534 on Monday August 08, 2022 @03:02PM (#32389560)
I work as a Digital Gardener[1] and we’re trained to NEVER use our real name.

- [1] https://youtu.be/XQLdhVpLBVE

Re:To uncover a deepfake video call, ask the caller to turn ... by Gigachad on Monday August 08, 2022 @06:53PM (#32392131)
My bank does a much better system where they ask for a photo of you holding your ID and a bit of paper with a number the support person gave you for authorizing larger transactions. It's still not bullet proof but since you already have to be logged in to the app to do this, I'd say it is sufficient.
Re:To uncover a deepfake video call, ask the caller to turn ... by throwaway2037 on Monday August 08, 2022 @08:01PM (#32392589)
Interesting anecdata! Do you think the photo is authenticated/validated automatically (by software), or by a human, or combination (assistance)?

And, if you are willing to share, what country/bank?

Re:To uncover a deepfake video call, ask the caller to turn ... by Gigachad on Monday August 08, 2022 @08:30PM (#32392788)
This case I was on the bank text support requesting to make a transaction of $100,000 in one go which the app would not let me do. So it was a real person on the other side. Bank was in Australia called Up.
Re:To uncover a deepfake video call, ask the caller to turn ... by techdragon on Monday August 08, 2022 @09:00PM (#32393005)
This sounds like a good thing. An extra step in a $100,000 transaction to prevent accidents or crimes definitely feels justified if the accounts not marked as normally moving heaps of money like a billionaire or something.
Re:To uncover a deepfake video call, ask the caller to turn ... by spurgu on Monday August 08, 2022 @12:40PM (#32387793)
Yeah this is quite common with fintech (stock brokers and crypto IME) KYC nowadays I've noticed.
Re:To uncover a deepfake video call, ask the caller to turn ... by sockaddr on Monday August 08, 2022 @12:54PM (#32387978)
May I ask what card/Institution? This would be an immediate no for me.
Re:To uncover a deepfake video call, ask the caller to turn ... by reaperducer on Monday August 08, 2022 @01:19PM (#32388339)
I'd trust the data with a (real, not online) bank more than most other companies like Google.

I'd be more worried about people hacking into networked security camera DVRs at stores and cafes and extracting image data from there. Multiple angles. Movement. Some are very high resolution these days. Sometimes they're mounted right on the POS, in your face. Sometimes they're actually in the top bezel of the beverage coolers.

Banks are the hardest way to get this data, not the easiest one.

Re:To uncover a deepfake video call, ask the caller to turn ... by rapind on Monday August 08, 2022 @01:33PM (#32388494)
> Banks are the hardest way to get this data, not the easiest one.

Is this statement based on data or a hunch? A quick google turns up a lot of bank data breaches.

Re:To uncover a deepfake video call, ask the caller to turn ... by reaperducer on Monday August 08, 2022 @02:01PM (#32388843)
A quick google turns up a lot of bank data breaches.

Because banks have to report data breaches. Do you think every neighborhood Gas-N-Blow is publicizing, or even knows, that it's been hacked?

Re:To uncover a deepfake video call, ask the caller to turn ... by rapind on Monday August 08, 2022 @03:39PM (#32390064)
Good point. I’m still wary of just assuming (if that’s what we’re doing here?) that old established organizations you’d expect to be secure are in fact secure. For example I would have expected credit rating agencies to be secure…

Mandatory reporting certainly helps IMO. Reporting should be mandatory for anyone handling PII.

Re:To uncover a deepfake video call, ask the caller to turn ... by kevin_thibedeau on Monday August 08, 2022 @02:56PM (#32389488)
No bank is going to run such a system in house. It will be a contracted service whose data is one breach away from giving fraudsters a firehose of data to exploit their victims.
Re:To uncover a deepfake video call, ask the caller to turn ... by monksy on Monday August 08, 2022 @05:14PM (#32391091)
You would? You would trust a random number to call you and talk to you about your bank account?

(That's what Chase's fraud department tells you to do.. no joke)

Re:To uncover a deepfake video call, ask the caller to turn ... by mulmen on Monday August 08, 2022 @03:08PM (#32389616)
"I trust you more than Google" is a pretty low bar in terms of personal data.
Re:To uncover a deepfake video call, ask the caller to turn ... by monksy on Monday August 08, 2022 @05:18PM (#32391139)
I want to know so that I can forward this to lawyers that specialize in biometric privacy law (in IL).

Fuck these biometeric data farmers.

Re:To uncover a deepfake video call, ask the caller to turn ... by april_22 on Monday August 08, 2022 @01:59PM (#32388820)
Yes I believe this sideways turning thing is mandatory when doing online identifications
Re:To uncover a deepfake video call, ask the caller to turn ... by marssaxman on Monday August 08, 2022 @03:08PM (#32389615)
What is an "online identification"? In what context would such a thing occur?
Re:To uncover a deepfake video call, ask the caller to turn ... by golemotron on Monday August 08, 2022 @12:41PM (#32387795)
And now that scan could eventually end up out there someplace.
Re:To uncover a deepfake video call, ask the caller to turn ... by sroussey on Monday August 08, 2022 @12:45PM (#32387854)
Agreed. Now they have the data to deep fake you turning your head.

I hope they delete the data immediately after use.

Re:To uncover a deepfake video call, ask the caller to turn ... by notahacker on Monday August 08, 2022 @02:06PM (#32388906)
Frankly, of all the personally identifying data I share with my bank, a low resolution phone video of the side of my head is the least worrying. It's like worrying the government knows my mum's maiden name!

In the eventuality that robust deepfake technology to provide fluid real-time animation of my head from limited data sources exists and someone actually wants to use it against me, they can probably find video content involving the side of my head from some freely available social network anyway.

Re:To uncover a deepfake video call, ask the caller to turn ... by tacocataco on Monday August 08, 2022 @06:12PM (#32391759)
I've been looking to rent housing and get a new job the last few months. The amount of info I've sent strangers always worries me.

At least with housing they don't ask me to input the information I've already sent them into their crappy website.

Re:To uncover a deepfake video call, ask the caller to turn ... by SoftTalker on Monday August 08, 2022 @02:20PM (#32389053)
And, if deepfake technology becomes so easy to use, video of your face will no longer serve to identify you.
Re:To uncover a deepfake video call, ask the caller to turn ... by Philadelphia on Monday August 08, 2022 @06:45PM (#32392065)
The implementation I’ve seen only stores a hash based on the image analysis