Introducing selfie for sign-in: a new way to access your Google Account

  Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents.

>If you've violated a Google policy, we may save your selfie video for a longer period of time to enforce our policies.

https://nevergivethemyourface.com/

Introducing...a feature no one actually wants, that opens a brand new security attack surface. Much wow.

I'm waiting for the new killer feature where "Sign In With Google" popup overlay dialogs go away forever and never come back.

I would love to know how they are going to handle deepfakes.

Also, doesn't this give law enforcement an easier avenue to compel access to someone's accounts?

If there were a Doomsday Clock for how close we are to "please drink verification can" (https://files.catbox.moe/eqg0b2.png), scientists would now move it to 3 minutes to midnight.

The fact that most people will love this is depressing.

Google already have 5,000 odd photos of me anyway in Google photos. I'm screwed either way.

I guess next this will be required for new account setup, then to retain access to your existing account.

Time to move the last few things I have out of Google (mostly shared documents). I’m glad I started this move several years ago.

Respectfully, John and Claire, what do they have you guys doing? Please blink twice in your selfies if you're okay.

That's Google in a nutshell - "the more personal data you give us, the more access you can have to Google services".

If this means that Google will do eventually do age verification then I think I trust them more than I trust Persona.

I happily will provide my selfie with one brown eye and round pale face

Certainly this will never go wrong in any possible way.

Is this basically “Video KYC” as required in some countries to open a bank account?

Next on Google's list, blood draw for sign-in.

April fools?

Sounds like a bad idea on so many layers. I don't want to give more selfies for training, feels like a disaster about to happen

This already exists and is called FaceID and doesn't have the same privacy risks since the face check is done locally to allow the user to use the passkey to authenticate.

>Your selfie video is encrypted at rest

All data nowadays is encrypted at rest. That doesn't really matter since someone stealing a hard drive from Google with your information on it will never happen. The more likely risk is Google decrypts it and then sends it somewhere it shouldn't go and potentially trained into some AI system.

I had to double check that today isn’t April 1st

Meanwhile google has been locking out and closing the gmail accounts of people, myself included, that signed up before a phone number was required. If you don't log into your account for ~a year or so they will lock it and demand you log in. Which you can do, and you can even input the 2FA code, but it still won't let you log in because it says "there's not enough information to prove this is your account" despite having all the information ever associated with it. The only way to prevent deletion is to add a completely new, never before there phone number. I couldn't do that so they deleted mine saying I never logged in despite logging in literally dozens of times.

I thought it is already April Fools for a while...

This seems like a terrible idea because deepfakes are getting better and better, even with them mentioning them and handwaving concerns away.

If only they wouldn't be evil... ugh.

I am surprised and encouraged by the fact that almost all of the comments here are negative!

I would absolutely delete/abandon my Google account before voluntarily giving them my facial data.

This sounds... totally normal.

Emphasis on "totally".

But I guess Google coming out with a cloud-based FaceID clone was just a matter of time...

apart from using just a vastly larger amount of 2D photos and more precise PI techniques, instead of that stupid local-only, small-AI-based, 3D-scanning technique that falls back to passwords...

eh, I prefer Apple as my good cop ever since I can afford Apple devices

I'm surprised how fast this came from the whole "give us your hand" bullshit with reCaptcha not being that long ago.

https://docs.cloud.google.com/recaptcha/docs/hand-gesture-ve...

"Google analyzes one or more videos of a user's hand as they perform various actions or gestures. The video is processed to extract hand landmark data, which includes 21 hand-knuckle coordinates."

Thats gona go well in history.

Wow this is a terrible idea. I used to really respect the security and identity team what happened?

Next step is to require the full transcript of your genome!

/s