{"id":1,"date":"2015-04-03T20:48:25","date_gmt":"2015-04-03T20:48:25","guid":{"rendered":"http:\/\/amirbekian.com\/blog\/?p=1"},"modified":"2015-04-08T08:16:50","modified_gmt":"2015-04-08T16:16:50","slug":"faceprint","status":"publish","type":"post","link":"https:\/\/amirbekian.com\/blog\/2015\/04\/faceprint\/","title":{"rendered":"Why face recognition as a way to replace passwords will remain a fantasy"},"content":{"rendered":"<p><a href=\"http:\/\/amirbekian.com\/blog\/wp-content\/uploads\/2015\/04\/faceprint.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\" size-medium wp-image-258 alignright\" src=\"http:\/\/amirbekian.com\/blog\/wp-content\/uploads\/2015\/04\/faceprint-300x242.jpg\" alt=\"faceprint\" width=\"300\" height=\"242\" srcset=\"https:\/\/amirbekian.com\/blog\/wp-content\/uploads\/2015\/04\/faceprint-300x242.jpg 300w, https:\/\/amirbekian.com\/blog\/wp-content\/uploads\/2015\/04\/faceprint.jpg 499w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a>Replacing much hated (yet resilient) passwords with face recognition-based authentication has been a cool idea of \u2018how things will work tomorrow\u2019 \u2013 yet &#8216;tomorrow&#8217; in terms of massive adoption never really happened. Some may argue that the stars \u2013 were not really aligned till now, but may be aligned very soon. Indeed, facial recognition methodology (naturally) keeps getting better. User-facing cameras (which just\u00a0several years ago were limited to PCs equipped with an extra webcam) are now getting increasingly omnipresent \u2013 from laptops to tablets to smartphones. And the pain of remembering passwords keeps getting worse. The idea is pursued by variety of smaller companies like <a href=\"https:\/\/www.keylemon.com\/\">KeyLemon<\/a> or <a href=\"http:\/\/sensiblevision.com\">Sensible Vision<\/a>, and face recognition features even made it into Android mobile OS. Moreover, as recently as last month no one else but formidable Jack Ma <a href=\"http:\/\/bit.ly\/1Fzz9Po\">demonstrated<\/a>\u00a0how\u00a0Alipay may allow payment authorization exclusively via user&#8217;s face recognition.<\/p>\n<p>So\u2026 tomorrow of \u201cauthorize with a &#8216;faceprint&#8217;\u201d is finally happening? I venture a prediction that it will never graduate from a cool concept to widely acceptable practice. I can mention at least two reasons why:<\/p>\n<ul>\n<li>As with any other authentication mechanisms, it\u2019s going to be a cat-and-mouse game \u2013 the authentication technology will get better only to be defeated by ever-creative fraudsters. In cases when the attackers are inherently capable of moving faster than the defense, the \u2018cat\u2019 is kind of doomed. We could reach a point \u2013 just like it happened with captcha \u2013 when building more defenses may become unfeasible. How does it apply to the face recognition domain? The weakness of using face recognition for authentication purposes is nothing new \u2013 e.g. these guys <a href=\"http:\/\/ubm.io\/1aHIUB1\">nailed<\/a> it back in 2009. True, the recognition software improved a lot since then, and some interesting ideas like detecting moving eyeball or blinks may offer a chance, but then again attacking these defenses to fool the software into false positives is becoming cheaper on a faster pace (3D printed masks, colored lenses, video-generated images?).<\/li>\n<li>Any change in consumer behavior on a massive scale would need a push from a very large player interested in making money on it &#8211; such as Apple (case in point: mobile payments). Apple is hardly going to do it though, as its newest devices already have fingerprint readers. While fingerprints arguably suffer from the same <a href=\"http:\/\/bit.ly\/1DhJvnq\">issues<\/a>, they are much more resilient biometrics \u2013 fingerprints are way harder to obtain than pictures of the potential victims (even taking this <a href=\"http:\/\/cnet.co\/1E2jCZy\">claim<\/a> into account). Moreover, if we combine this observation with dropping price of fingerprint readers, envisioning even cheaper devices having one\u00a0in near future is easier than imagining face recognition used as main biometrics to identify the end users. In addition, cameras can be used to scan your fingerprints instead of your taking a picture of your face. There&#8217;s little evidence that other large companies would have enough incentives to go against this trend.<\/li>\n<\/ul>\n<p>Having said that I can see how &#8216;faceprint&#8217; can be used as one of choices of a biometric 2nd factor, or in some physical stores which would like to appear futuristic to its customers. Maybe even some airports.\u00a0Wide adoption however may remain as\u00a0&#8216;the cool feature of tomorrow&#8217;.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Replacing much hated (yet resilient) passwords with face recognition-based authentication has been a cool idea of \u2018how things will work tomorrow\u2019 \u2013 yet &#8216;tomorrow&#8217; in terms of massive adoption never really happened. Some may argue that the stars \u2013 were not really aligned till now, but may be aligned very soon. Indeed, facial recognition methodology &hellip; <a href=\"https:\/\/amirbekian.com\/blog\/2015\/04\/faceprint\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Why face recognition as a way to replace passwords will remain a fantasy<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,4],"tags":[5,20],"class_list":["post-1","post","type-post","status-publish","format-standard","hentry","category-general-observations-commentary","category-prognosis","tag-2fa","tag-passwords"],"_links":{"self":[{"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/posts\/1","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/comments?post=1"}],"version-history":[{"count":4,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/posts\/1\/revisions"}],"predecessor-version":[{"id":259,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/posts\/1\/revisions\/259"}],"wp:attachment":[{"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/media?parent=1"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/categories?post=1"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/amirbekian.com\/blog\/wp-json\/wp\/v2\/tags?post=1"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}