Per Editor: Li Zedong
According to a report by CCTV On January 14, the Xingning District Court of Nanning City, Guangxi Province, heard a special theft case a few days ago. Taking advantage of his ex-girlfriend's coma, the defendant successively passed fingerprint and face verification and repeatedly transferred a total of more than 150,000 yuan from the woman's mobile phone.
The court rendered a first-instance judgment on the case, and Huang Mouhui was sentenced to three years and six months in prison for committing theft, and fined 20,000 yuan, and ordered him to return all the economic losses of the victim, Dong Mou.
Image source: CCTV Quick Look
News review: The woman fell asleep and was unlocked by the eyelids to unlock Alipay and transferred away 150,000
According to CCTV News, the case occurred on December 26, 2020, and the defendant Huang Mouhui came to the home of his ex-girlfriend Dong Mouhui in the name of discussing repayment, saw that Dong Mou was sick, and also took the initiative to cook and feed medicine.
However, what Dong did not expect was that after drinking the "cold medicine" brewed by Huang Mouhui himself, he soon felt unwell and had to go back to the house to sleep.
Judge Li Zhifu of the Criminal Trial Division of the Xingning District Court of Nanning City: (Huang Mouhui took advantage of) the opportunity to flush the cold medicine, poured the drug he bought into the water in the kitchen, and after Dong drank it for about an hour, she felt a little abnormal and dizzy.
The living room video shows that after Dong went into the bedroom and fell asleep, Huang Mouhui rummaged back and forth in the living room to find Dong's mobile phone. More than half an hour later, Huang Mouhui walked out of the bedroom with two mobile phones in his hand, one of which was Dong Mou's mobile phone that had been unlocked. After operating the mobile phone many times, Huang Mouhui took the mobile phone and left Dong's home overnight.
According to Judge Li Zhifu of the Criminal Trial Division of the Xingning District Court in Nanning City, defendant Huang Mouhui used her fingers to unlock her mobile phone during the period when the victim Dong was asleep, opened Dong's eyes with her hand, logged into the victim Dong's Alipay, and modified the relevant (payment) password inside and transferred money in Alipay.
In the early morning of the next day, Dong woke up and found that Huang Mouhui and his mobile phone were missing, and immediately called the police. The police found that Huang Mouhui transferred a total of 154,100 yuan from Dong's huabei, borrowing, Alipay balance and bank card on several occasions that night.
Alipay customer service response: normal circumstances can not pass
For the face brush payment risk exposed by the case, does Alipay know it? The CCTV reporter dialed the phone number of Alipay's customer service.
Alipay customer service: face recognition, it is all identified with a living object, others when you sleep to carry out a face sweep, under normal circumstances there is no way to pass. Most of these cases do not arise because of Alipay's security problems, it is mainly because others have operated her (mobile phone).
Once the mobile phone is operated by others, can other payment software also be paid or transferred by rolling eyelids? The reporter used four mobile phones to test WeChat and found that Android mobile phones and new Apple mobile phones with a price of more than 6,000 yuan can use face payment to transfer money to friends, and encounter the same face verification interface as the mobile phone unlock. The reporter opened the eyelids of his colleagues and tried many times, but they could not pass the verification.
Although the two lower-priced Android phones also support face unlock, they can only choose fingerprint and password in WeChat Pay. The reporter chooses fingerprint payment, and after tapping the finger of a colleague with his mobile phone, he can easily achieve a successful transfer. If you want to modify the WeChat Payment password to facilitate multiple transfers, the interface displayed by the four mobile phones is the same, you can only enter the original payment password, and none of them provide face brushing or fingerprint verification methods.
Face fingerprint payment must be both convenient and secure
Tian Tian is a doctor of artificial intelligence at Tsinghua University and has been committed to the improvement of artificial intelligence security technology. He told reporters that whether it is the 2D face recognition technology used by low-cost mobile phones or the mid-to-high-end mobile phones with 3D face recognition technology, it is possible to passively open the eyelids and pass the face verification.
Artificial intelligence expert Tian Tian: Face recognition technology is actually through the algorithm to extract some key information of the face, the eyes, nose, mouth and other surrounding areas will have more key points, so in fact, if there is some interference in the face recognition process, cheeks or forehead, it may not have a particularly large impact on identity recognition.
Because of this, most of the current software will add live verification technology on the basis of face recognition, that is, it is necessary to make nod, blink, and shake the head. In general, the more actions that need to be verified, the more difficult it is to break through. According to reports, the relatively high-end mobile phone verified by the reporter cannot be unlocked by being rolled over, and the core is to add gaze detection technology. When the tested person passively opens his eyelids, he simulates the sleep state and avoids looking directly at the screen, so he cannot unlock the phone.
Daily economic news comprehensive CCTV network quick look, CCTV news reports
Daily economic news