31How do deepfakes defeat remote identity verification, and what is the difference between presentation and injection attacks?▼hardNewJPMorgan ChaseStripeApple◆ premiumLiveness checks were built to catch a photo held up to a camera. Deepfakes often never go near the camera at all.Open full answer →
21How do hardware-backed keys work on Android and iOS, what does key attestation prove, and why must biometrics unlock a key, not a boolean?▼hardNewGoogleAppleJPMorgan Chase◆ premiumA key the app cannot export is only half the story. The other half is making the key usable only after the user is really present, which a hooked 'authentication succeeded' callback can fake.Open full answer →