Options for when selfies are required?
from makeitwonderful@lemmy.today to privacy@lemmy.ml on 01 Nov 15:29
https://lemmy.today/post/40887020
from makeitwonderful@lemmy.today to privacy@lemmy.ml on 01 Nov 15:29
https://lemmy.today/post/40887020
I see more and more apps and services requiring a selfie to proceed.
What are our privacy minded people doing when they want to use a service but not provide the selfie?
threaded - newest
I’ve only experienced anything like this once, and it was while trying to sign up for a popular cash (payment) app. I noped the fuck out.
I never tested it, but what about having a second phone with those filters that change your appearance, and then you point your camera on its screen?
A lot of this bullshit is pretty easily tricked tbh
pcgamer.com/…/brits-can-get-around-discords-age-v…
Kojima San to the rescue
That has a very high probability of convincing me not to use that app or service.
I’m imagining inserting a face-swap program into the software stack powering the webcam. I know it’s technically feasible with Video4Linux.
If the service has legitimate reasons, like it is a web hosting company or something governmental, then why not. If it is a social network, a game or the like, I will simply not use it.
Using services of a hosting company is something very serious, because the stakes are high, both in costs and in legal responsibility, so most likely you will need to prove your identity. Some companies will even require a meeting to sign a contract.
It’s hard to trust organizations to store digital data (including selfie photos) without leaking. Even without leaks, the data is still has the possibility to be accessed by members of the organization, their vendors and auditors. Will everyone use the data only for the intended purpose? I can’t be certain so I’d like to push back on these kind of requirements when I’m able.
Incidents of these selfie leaks have already been reported.
How is it legit for a hosting company tp demand a selfie!? Is that a thing now? I had multiple hosting accounts and never encontered anything more than requirement to add a credit card
Because users need to be accountable for how they use their services, like hosting phishing websites, sending massive spam or scam campaigns. They would ask for a selfie, not stored, to match it with an ID.
Not all hosting providers do ask for ID. A credit card is not enough to prove identity because you can use virtual anonymous ones.
I have never had a web host ask me to prove my identity, and I would probably pick a different one if they did.
They do have my credit card number though, so I’m far from anonymous.
I’ve never provided a selfie and I never will. When it’s demanded, I find another service.
The last time I selfie was demanded was when I attempted to sign up for an online bank, Simplii Financial. SF wanted a selfie and my ID. SF used to have a physical locations one could go to for opening an account. Now it’s all online.
In the US, some of the government sites require verification through id.me now
Another reason I’m glad I don’t live there.
On your ID/pass and maybe your CV. Nowhere else.
I have not used a service with this requirement, and will refuse to at any point. Self hosting, open source, offline.
I’d look for an alternative. Failing that, I would try every trick to fake that selfie.
Depends on what kind of services… if it’s ESTA, visa, official documents basically, or KYC from a bank, well yes, if there is no better way (e.g. cryptographic signature via physical ID card with chip) then I’ll do it.
If it’s for a random Website they can fuck off.
I’d go to this person does not exist and use a photo from there to trick it. But they’re getting smarter about people tricking it and it doesn’t work when ID is required. But it’s at least a non existing face so you’re not using someone else.
How can we be sure that that person actually does not exist?
I thought they just used AI generated faces
Yes, I know, but how do you know that it doesn’t accidentally generate a face that’s identical to an existing person’s face? After all, it’s trained on images of humans.
Unless it is something absolutely necessary like a bank app or something which I haven’t run into requirements for then I’d stay away from those types of apps and services.
Like if it is social media then I can live without it. Discord had those leaks from verification so even more reason to just stay away if frivolous apps or services like that ask for it.
If it’s something like a bank or the government which already know my real identity then I don’t really care. For anything else, then I just don’t use the service.
I don’t use apps or services that require a photo, video of myself, upload of my ID, etc.
I don’t care as much about privacy…
I deleted my PayPal account as they asked me for a KYC video.
That’s just ID theft waiting to happen.
So what do you use instead of it?
Open to ideas for alternatives.
I had opened it with the intent of using it for receiving money, but didn’t really need it until just recently.
So, just waiting until I actually end up requiring to receive payments, to open an account somewhere.
As far as KYC goes, the payment processor should ask the Bank (the one that I am connecting to the account) to verify my identity.
I can then login to the bank via the respective bank’s website, find an entry with the PayPal account no. and be able to Authorise the request.
That way, PayPal knows that I am a legitimate account holder, without requiring to make my videos.
Also, casual videos should not be considered a valid method of verification anywhere.
You should in the first place avoid them, but if it’s necessary :
thispersondoesnotexist.com
Could work
What are you using that requires a selfie? I can’t think of any services or apps I use that require a selfie. It can’t be that hard to avoid if I’ve never encountered one.