Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Black Hat: System links your face to your Social Security number and other private things
Network World ^ | 1 August 2011 | Tim Greene

Posted on 08/02/2011 11:04:19 AM PDT by ShadowAce

Soon it will be practicable to take someone's photo on a smartphone and within minutes know their Social Security number and a range of other private data like their personal interests, sexual preference and credit status, researchers will tell the Black Hat security conference this week.

The technique calls for linking faces of random individuals to images in databases that contain other information about them and using that information to project Social Security numbers, says Alessandro Acquisti, a professor at Carnegie Mellon University, who will present the research at the conference.

He says if he can arrange the logistics, he will demonstrate the technique at the show using an application on a smartphone that taps cloud-based databases and facial recognition software. He uses Social Security numbers as an example of what can be projected, but other information such as sexual orientation and credit ratings can also be inferred, he says.

The point, Acquisti says, is to show that a framework of digital surveillance that can go from a person's image to personal data exists today and will only get better as technologies improve, making privacy more scarce and making surveillance readily available to the masses. "This, I believe and fear, is the future we are walking into," he says.

He admits the method is far from foolproof, but that the individual pieces of technology are developing rapidly and could be ready for use in the real world in the foreseeable future. He is working on projections of how long it will take for the technologies involved to develop to the point of being reliable.

Acquisti bases his presentation on three pieces of research he and his team carried out. The first took the primary Facebook images that people posted to establish their identity. The team compared the Facebook images using PittPatt face-recognition software to identify other photos of the same person in another database, namely that of a popular dating service where people registered under phony names.

After the software made a match, actual people looked at the pictures to determine how accurate the matches were. They considered just PittPatt's best guess for each photo.

The software correctly identified 1 in 10 dating site members, which the researchers say is pretty good considering the experiment used just one photo -- the Facebook profile photo -- to identify the person with the known identity.

Plus, they only considered PittPatt's best guess. Had they considered the second and third best guesses, accuracy might improve as well, he says.

The second experiment photographed random college students and asked them to fill out a questionnaire. Meanwhile, the photo was compared to others in online databases to identify the students realtime and compile other photos of them.

The students checked the photos and found they were accurate about a third of the time.

The third experiment took the subjects' Facebook profiles and, from inferences made from the profiles, predicted the first five digits of their Social Security numbers and their interests and activities.

The last part is an implementation of a Social Security number-predicting algorithm Acquisti presented at Black Hat two years ago. Based on when and where a person was born, the algorithm predicts the first five digits, which are based on location. It can then guesses the remaining digits, but that could take 100 tries.


TOPICS: Computers/Internet
KEYWORDS: hacking; identity

1 posted on 08/02/2011 11:04:25 AM PDT by ShadowAce
[ Post Reply | Private Reply | View Replies]

To: rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; JosephW; ...

2 posted on 08/02/2011 11:05:18 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

Comment #3 Removed by Moderator

To: ShadowAce

“The third experiment took the subjects’ Facebook profiles and, from inferences made from the profiles, predicted the first five digits of their Social Security numbers and their interests and activities.”

LOL! Wow! So you can tell what their interests are by looking at their facebook profiles. Amazing. :)


4 posted on 08/02/2011 11:11:11 AM PDT by Pessimist
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
By logical extension, it should also be possible to use this system to winnow out potential terrorists at airports, railroads and other transportation centers and cut the number of TSA flunkies by at least 3/4th.
5 posted on 08/02/2011 11:12:50 AM PDT by Vigilanteman (Obama: Fake black man. Fake Messiah. Fake American. How many fakes can you fit in one Zer0?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
Nearly time for a fashion statement...


6 posted on 08/02/2011 11:23:59 AM PDT by null and void (Day 922. When your only tools are a Hammer & Sickle, everything looks like a Capitalist...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
ALPR
7 posted on 08/02/2011 1:04:21 PM PDT by martin_fierro (< |:)~)
[ Post Reply | Private Reply | To 1 | View Replies]

To: martin_fierro

wow


8 posted on 08/02/2011 1:16:53 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 7 | View Replies]

To: ShadowAce
Based on when and where a person was born, the algorithm predicts the first five digits, which are based on location. It can then guesses the remaining digits, but that could take 100 tries.

So how is it guessing (and verifying) the remaining digits? I'm pretty sure you'd need a good 5,000 guesses to get to a 50-50 chance on them.
9 posted on 08/02/2011 1:33:16 PM PDT by Svartalfiar
[ Post Reply | Private Reply | To 1 | View Replies]

To: Vigilanteman

Or find out what illegals are using what stolen SSN’s.


10 posted on 08/02/2011 1:35:49 PM PDT by HeartlandOfAmerica (Geithner: Taxes on 'Small Business' Must Rise So Government Doesn't 'Shrink')
[ Post Reply | Private Reply | To 5 | View Replies]

To: Vigilanteman
In fact, I can probably infer a lot just from your screen name.

You're probably a white supremacist anti-gay hetero racist right wing Bible thumping gun loving angry white male. /lib

11 posted on 08/02/2011 1:41:11 PM PDT by HeartlandOfAmerica (Geithner: Taxes on 'Small Business' Must Rise So Government Doesn't 'Shrink')
[ Post Reply | Private Reply | To 5 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson