Hacker News Reader

Comment by bearjaws | Hacker News Reader

Serendipitously over the weekend I was thinking about a future where for key sensitive data access (e.g. production main) you may need to have a quick 5 minute call (4th factor, "3D verification") where you would be asked to turn on your camera and be asked to answer some simple question and in different positions...

Main thinking was how out of control it would get, it would probably end up looking like anti-cheat systems where its a constant cat and mouse game due to growing sophistication of deep fake models.

View on HN

> Main thinking was how out of control it would get…

From a job listing, circa 2024:

- Job may require occasional lifting. (No more than 20kg)

- Expected to travel up to 25% of the year.

- Proprietary access control requires users be able to do handstands and/or simple juggling. (Feats subject to change)

- EEOC employer.

in the UK this is already relatively common for online banking. I asked my bank to raise my daily transfer limit the other day for a property purchase and part of the process was recording a video of myself in their app.

And, of course, as barriers are raised it makes it very difficult for some portion of the population (and less convenient for everyone else). I have to change addresses for an older person at a couple of banks and I'm sure it's going to be a nightmare.

That being said, if instead of "use our custom app you've never seen to record a video" it's "just talk to a person with some standard video chat" then maybe it makes things a whole lot easier? But I don't see that being how it's implemented these days...

Yeah. It's still going to be a barrier for some people but I'm guessing most could get comfortable with it if they were forced to. But getting my dad to do anything that isn't a voice call is pretty much pulling teeth. (Except for using Amazon. I think a lot of things are more don't want to than can't.))

This is already a thing multiple vendors provide, e.g. https://www.idnow.io/products/idnow-videoident/ (used for use cases like banking and electronic contract signing)

We have PK cryptography you know, yubikeys and such.

Yubikeys can be stolen... I take it from the GP's description the access is sensitive enough to require more assurance than that.

I assume the other problem is that public key infrastructure doesn't exist in a lot of places, whereas (almost) everyone has a webcam.

I had the same thought as many on this thread: all biometric identification is basically an arms race that moves along as new ways of gathering biometrics become convenient and ways of faking them are developed. But as you say, yubikeys also have problems. At some point it will probably be a hybrid, e.g. require a known acquaintance to digitally sign a video where you appear together.

You need some way to activate the yubikey. That could well be an online interview.

Reply on news.ycombinator.com