QQ 第三代密码保护人脸识别重大安全隐患

作者:vkvi 来源:千一网络(原创) 日期:2016-10-13

我们知道 QQ 密保的重要性大于 QQ 密码,因为通过 QQ 密保可以改 QQ 密码。

以前的 QQ 密保多是通过问你小学老师是谁呀,配偶生日呀这些问题。

现在升级成了人脸。

不过有个安全隐患,就是拿一张照片也可以过关。

我们测试过,这张照片即使是在手机里,还不是精美打印出来,都登录成功了,

试想一下,我们手机中哪个没有自己的照片?如果手机丢了,相当于密保也丢了。

有人说:你这是误读,有实际改密时,会要求眨眼睛、转脸这些动作。的确是这样的,但是在修改某些设置时并不需要眨眼睛、转脸这些动作,也就是说拿到手机的人可以让你的密保失效,你原计划通过刷脸改密的,可以被拿到手机的人给关掉这个功能。

而支付宝(包括网商银行)做得相对较好。

支付宝(包括网商银行)人脸识别要求眨眼睛,这就提高了一定难度,不过对于有了原始照片,通过 PS 处理,弄成眨眼睛的 GIF 动画或视频,是否能够蒙混过关,未曾测试。

你前面那位网友看了:VC# 中 RadioButton 怎么分组?

▲▲▲嘿,欢迎转载传播本站原创文章,尽量保留来源噢。▲▲▲

文章评论
  • 1 楼:coach factory outlet
    I wanted to put you one tiny note so as to thank you the moment again on the beautiful concepts you've shared in this case. This is quite strangely open-handed of people like you giving extensively what a lot of people could have marketed as an e book to earn some profit on their own, especially considering that you might well have done it if you ever wanted. The techniques likewise served as a great way to be aware that other people have the same zeal much like my very own to know the truth a little more in regard to this matter. I am sure there are lots of more pleasant situations up front for many who see your blog post.
  • 2 楼:kate spade outlet
    I simply had to appreciate you once more. I am not sure what I could possibly have used without these techniques shown by you about this situation. It was a difficult difficulty for me, however , looking at the specialised mode you resolved that forced me to cry with fulfillment. I am happier for your guidance and then hope you really know what a powerful job you are always accomplishing teaching some other people via your webblog. I know that you haven't come across any of us.
  • 3 楼:eagles jerseys
    I definitely wanted to type a small remark in order to thank you for all the marvelous guidelines you are posting on this website. My long internet lookup has at the end of the day been honored with good facts and techniques to talk about with my companions. I would mention that we site visitors actually are quite endowed to exist in a good site with very many special professionals with valuable principles. I feel pretty fortunate to have seen the web site and look forward to really more enjoyable times reading here. Thanks a lot again for all the details.
标题:必填
内容:
本站永远终止与捏造“罪名”不支付广告费的某度联盟合作。
vkvi
vkvi

作者简介: vkvi,致力于 .NET Web 开发、移动开发的技术推广,在 .NET、SQL Server、Windows Server 等方面有深入研究和丰富经验,10 年间共计撰写文章 4000 余篇。 主持金融、国土、农业、电商等多个行业项目执行, 推行“技术提升生产力、人心决定成功率”的管理理论。 联系他