[Feature request] Face Unlock on Google Pixel 9 Pro

de0u

UN05863076 Its really a bummer that GOS wont consider it.

But it has been considered: https://discuss.grapheneos.org/d/15613-what-features-will-be-missing-in-gos-android-15-version/29

UN05863076 I don't like being told that I can or can't use something because someone else decided that for me.

There is a world of difference between somebody telling you that you can't use something that you already have, and somebody not wanting to build something that you want and give it to you for free.

starglider

de0u This comment should be stickied to the top of every open source project forum.

DeletedUser396

UN05863076
Do you bother to lock your front door with a key or is it just closed on Velcro, for your convenience?

Ilt

Pixels 7-9 has dual-pixel cameras, so it could be used for depth sensing pretty well for face recognition and even has some sort of certification.
As I understand there is AOSP Face authentication HIDL and vendor closed source implementation of it..
It should be easy to add it to GOS make disabled by default and mark that option as "unsecure closed source". It would be very fair for those, who satisfied with this level of security for every day usage on non sensitive user account, for some more sensitive it is absolutely must to enable multiple users mode on device and add second user with strong auth.

Ilt

Ilt
More over, face recognition has advantage in counter "Shoulder surfing attack" because there is no secret input by user (that could be looked, recorded or even forgotten) and it is for sure more secure then fingerprint because of liveness detection by requirement of opened eyes.

userofgos

Ilt It should be easy to add it to GOS make disabled by default and mark that option as "unsecure closed source".

To say it would be "easy" to add any feature to GOS completely undermines the amount of work required to write secure code, test it, and maintain across every release. Also, GrapheneOS devs have been adamant on not adding any half-baked and/or low quality security features. So until the hardware/software meets their security requirements, I don't see it happening.

DeletedUser713

Ilt Pixels 7-9 has dual-pixel cameras

what the fuck is that even supposed to mean?!

Ilt It should be easy

Then do it. You say it's easy - you're free to implement it in a pull request so that we all can benefit from your work.

Ilt More over, face recognition has advantage in counter "Shoulder surfing attack" because there is no secret input by user (that could be looked

no, it really isn't. Use fingerprint unlock to prevent shoulder surfing. Even better, use 2FA unlock which is the most secure method.

Ilt and it is for sure more secure then fingerprint

Quite the opposite actually and the only reason why it wasn't implemented.

Ilt liveness detection by requirement of opened eyes.

Fingerprint has the requirement of passing electric current. A cut off thumb won't do it.

Your "liveness detection" won't really do anything when we can't even verify code safety (being closed source and all). For all we know, there could be backdoors in the code.

Ilt

DeletedUser713 Ilt Pixels 7-9 has dual-pixel cameras

what the fuck is that even supposed to mean?!

There is twice more diods in sensor in horizontals placed side by side with little twist, so it able to use paralax effect to capture 3d in close distance, like if you have two eyes joined in one..

DeletedUser713 Ilt It should be easy

Then do it. You say it's easy - you're free to implement it in a pull request so that we all can benefit from your work.

Maybe, but it will take awhile for me and I will not eat for this.

DeletedUser713 Ilt More over, face recognition has advantage in counter "Shoulder surfing attack" because there is no secret input by user (that could be looked

no, it really isn't. Use fingerprint unlock to prevent shoulder surfing. Even better, use 2FA unlock which is the most secure method.

Security should be practical.

DeletedUser713 Ilt and it is for sure more secure then fingerprint

Quite the opposite actually and the only reason why it wasn't implemented.

Not true. As I have read, there is prepossession that it is unsecure and should be avoided in any case..

DeletedUser713 Ilt liveness detection by requirement of opened eyes.

Fingerprint has the requirement of passing electric current. A cut off thumb won't do it.

Just try, it will.

DeletedUser713 Your "liveness detection" won't really do anything when we can't even verify code safety (being closed source and all). For all we know, there could be backdoors in the code.

Implementation could and should be verified statistically even if you have source code.. if it sandboxed will be very complicated to embed a backdoor in blob.

Besides you already has many blobs and 🫢 silicone chip in device that you don't know nothing about.

LeslieFH

DeletedUser713 Fingerprint has the requirement of passing electric current. A cut off thumb won't do it.

No, it doesn't. The fingerprint reader in Pixel phones is either optical or ultrasound, behind non-conductive glass, it has no way to check for electricity.

I mean, you're right that fingerprint is somewhat safer than face unlock when it comes to biometrics, but both aren't very secure.

DeletedUser713

Ilt okay, you are either trolling or you really don't know anything. I hope it's the latter.

alonely0

DeletedUser87 This feature does exist, it's the "Lockdown" button on the shutdown/reboot menu.

« Previous Page