Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Um, use an app that requires you submit to video facial recognition to make an account?

So that you can then use that account, which is tied to your biometrics, for lawbreaking?

Wut?





You don't have to do that? I touched upon it in the first section of the post. All you need is a valid phone number, which you can use throwaway trial SIM cards for.

> Our first hurdle is the account creation setup

Account creation requires biometric face-scan.


No it doesn't? Have you used Hinge? I created a fake account using a trial SIM card and stock photos lol.

Tons of posts on Reddit disagree with you:

https://redlib.catsarch.com/r/SwipeHelper/search?q=hinge+sel...

Maybe you're getting lucky and not tickling their risk-based nonsense, but now that this article has been posted they'll certainly crank that knob up to 11.


Ah, I see, you're referring to this: https://help.hinge.co/hc/en-us/articles/10303221435539-What-...

You probably don't use Hinge. The verification is not necessary at all. It's merely used to "verify" your identity to other users. It has no bearing on what I cover in the post.


> Note: In certain regions, Hinge requires users to complete a biometric Face Check™

Interesting! Well, I'm definitely not in whatever those regions are. Presumably if a threat actor was motivated enough this would be fairly easily circumvented :]

Edit: e.g. via residential proxy IPs and a bunch of cheap Android phones


In 2025/2026 it’s not hard to generate fake videos that bypass these security gates.

They don't let you upload facefusion videos. The video has to come from the front-facing camera on a phone.

There is an extremely profitable company (whose data hoard keeps geting hacked but why should they care?) built around this:

  https://www.au10tix.com/
Most apps use device attestation (derived from secure boot) to make sure the video stream is really coming from a front-facing camera on a physical device. If Hinge isn't doing this yet they surely will be in 5, 4, 3, 2...

Can someone not just have an additional device and play a video on top of it?

Fundamentally no amount of front facing camera on a physical device or other shenanigan a company might do can really do anything about it?


Front-facing paired with IR depth map would map it an order of magnitude harder, but I don't know what the standards are around that or what the installed base is on Android.

I know, but you need to think like someone trying to get around the limitation with the lowest effort possible.

They don't feed it a video clip. They hold the camera in front of a screen playing the video. Use a low-end phone with a blurry camera to increase your chances.


> They hold the camera in front of a screen playing the video.

Neural networks are very, very, very good at detecting this.

It's much easier than detecting "liveness" (for whatever definition of that term you subscribe to).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: