Comment on Forgot your Google password? Now you can log in with a selfie.

webghost0101@sopuli.xyz ⁨10⁩ ⁨hours⁩ ago

• sanzky@beehaw.org ⁨6⁩ ⁨hours⁩ ago

  faceId is completely in device. This is a video that is sent to google to process

  source
• oats@beehaw.org ⁨2⁩ ⁨hours⁩ ago

  Maybe its “unlocking” stuff on your desktop browser with your phone, like the new captchas where you have to scan a QR and receive a code via SMS (seriously google, what the heck)

  source
• smeg@feddit.uk ⁨9⁩ ⁨hours⁩ ago

  That’s unlocking your phone, this is unlocking your entire Google account (e.g. on a new device)

  source

  • webghost0101@sopuli.xyz ⁨9⁩ ⁨hours⁩ ago

    Is that really that different?

    The article doesn’t go into any length to explain the technology. But assuringly its just an encrypted passcode created with an algorithm using measured face data.

    Crafting a secure reliable personal id based on pure visual appearance has been tricky and when this came out i disliked it but it was clearly a feat.

    What is the story here?

    Google trusting this technology?

    Them adding age verification to it?

    I am just confused what makes this enough of something to write/post it.

    source

    • Ooops@feddit.org ⁨7⁩ ⁨hours⁩ ago

      Is that really that different?

      Conceptionally yes. You can refuse to unlock your phone with your face. You cannot refuse to allow Google to access your account (and thus your phone, too) with a picture of your face, no matter how bad the tech is.

      source

      • TheButtonJustSpins@infosec.pub ⁨7⁩ ⁨hours⁩ ago

        You will have to set this feature up ahead of time if you want the option of regaining account access with a selfie later on.

        source

        • -> View More Comments
    • jansk@beehaw.org ⁨9⁩ ⁨hours⁩ ago

      Very different, I would say. The security implication of authorising you on a new device is much more severe than logging you into a device you are already authorised against.

      source

      • smeg@feddit.uk ⁨9⁩ ⁨hours⁩ ago

        Exactly, someone spoofing the biometrics to unlock my phone relies on them having physical access, whereas spoofing the biometrics on an account that can be accessed anywhere in the world is quite a bit bigger of a threat

        source