Selfie-based ID raises eyebrows among infosec experts

Submitted ⁨⁨4⁩ ⁨months⁩ ago⁩ by ⁨mox@lemmy.sdf.org⁩ to ⁨technology@lemmy.world⁩

https://www.theregister.com/2024/07/08/selfie_authentication_security/

cross-posted from: lemm.ee/post/36566249

The use of selfies to verify identity online is an emerging trend in some parts of the world since the pandemic forced more business to go digital. Some banks – and even governments – have begun requiring live images over Zoom or similar in order to participate in the modern economy. The question must be asked, though: is it cyber smart?

Just last Monday the Southeast Asian nation of Vietnam began requiring face scans on phone banking apps as proof of identity for all digital transactions of around $400 and above.

The nation’s residents are not able to opt out of the banking rules, despite Vietnam regularly finding itself ranked poorly when it comes to internet privacy or cyber security.

Local media has weighed in to suggest that selfies will not improve security. And just days into the new regime, some apps have already been called out for accepting still photos instead of a live image of the individual.

source

Comments

Sort:hotnew top

laxe@lemmy.world ⁨4⁩ ⁨months⁩ ago
Terrible article image

source
autotldr@lemmings.world [bot] ⁨4⁩ ⁨months⁩ ago
This is the best summary I could come up with:

Just last Monday the Southeast Asian nation of Vietnam began requiring face scans on phone banking apps as proof of identity for all digital transactions of around $400 and above.

Late last month, US cyber security firm Resecurity flagged similar concerns when it found a spike in leaked identity documents containing selfies of Singaporeans on the dark web.

Resecurity asserted that some were captured by cyber crime groups that run fake telemarketing or customer support scams and gather selfies so they can sell them to other miscreants.

“Using selfies for identity verification has been growing steadily for around the last five years, but the inflection point was during the pandemic when people were forced to engage digitally,” VP analyst at Gartner, Akif Khan, told The Register.

In his experience, businesses that rely on simple still selfies are typically smaller outfits that have experienced fraud and have implemented a selfie-based stopgap as they scramble to put a proper solution in place.

Khan thinks concern about identity theft from still images and picture IDs found on the dark web is overblown, as most entities will require liveness checks for opening bank accounts and other tasks.

The original article contains 973 words, the summary contains 193 words. Saved 80%. I’m a bot and I’m open source!

source