Comment on Forgot your Google password? Now you can log in with a selfie.

• webghost0101@sopuli.xyz ⁨3⁩ ⁨weeks⁩ ago

  Is that really that different?

  The article doesn’t go into any length to explain the technology. But assuringly its just an encrypted passcode created with an algorithm using measured face data.

  Crafting a secure reliable personal id based on pure visual appearance has been tricky and when this came out i disliked it but it was clearly a feat.

  What is the story here?

  Google trusting this technology?

  Them adding age verification to it?

  I am just confused what makes this enough of something to write/post it.

  source

  • Ooops@feddit.org ⁨3⁩ ⁨weeks⁩ ago

    Is that really that different?

    Conceptionally yes. You can refuse to unlock your phone with your face. You cannot refuse to allow Google to access your account (and thus your phone, too) with a picture of your face, no matter how bad the tech is.

    source

    • TheButtonJustSpins@infosec.pub ⁨3⁩ ⁨weeks⁩ ago

      You will have to set this feature up ahead of time if you want the option of regaining account access with a selfie later on.

      source

      • Ooops@feddit.org ⁨2⁩ ⁨weeks⁩ ago

        for now…

        source

        • -> View More Comments
  • jansk@beehaw.org ⁨3⁩ ⁨weeks⁩ ago

    Very different, I would say. The security implication of authorising you on a new device is much more severe than logging you into a device you are already authorised against.

    source

    • smeg@feddit.uk ⁨3⁩ ⁨weeks⁩ ago

      Exactly, someone spoofing the biometrics to unlock my phone relies on them having physical access, whereas spoofing the biometrics on an account that can be accessed anywhere in the world is quite a bit bigger of a threat

      source
  • TehPers@beehaw.org ⁨2⁩ ⁨weeks⁩ ago

    Your phone stores the code on the device and does facial recognition locally. Apps on your phone only receive that data if they explicitly request your camera and perform the recognition themselves.

    This is vastly different than sending Google a video of your face that they save locally and use to analyze future selfie videos.

    But assuringly its just an encrypted passcode created with an algorithm using measured face data.

    From the article:

    Selfie videos can be used for login purposes, to verify your age for accessing certain account features, and to create an AI avatar.

    It’s not just an encrypted passcode.

    source