Red Bleed: A Pragmatic Near-Infrared Presentation Attack on Facial Biometric...
summary
A custom LCD paired with an 850 nm backlight and wire‑grid polarizers projects high‑contrast NIR video that fools enterprise Windows Hello modules from HP, Dell, and Lenovo; an assembled device costs about $350. Replay of recorded NIR videos on 22 subjects yields 100% unlocks, and a VAE-based VIS→NIR generator plus face swap achieves >97% success with nine ground‑truth NIR images and ~61% with one. Microsoft issues CVE 2025 and ships a patch; Apple’s depth‑based Face ID remains unaffected.
AI-written summary · about
chapters (11)
- 0:00Red Bleed research intro
- 1:16Facial recognition vulnerabilities
- 3:27IR imaging defenses
- 4:32NIR display attack idea
- 5:56Backlight bleed solution
- 7:23Pragmatic NIR attack device
- 8:05Windows Hello testing
- 8:47NIR videos from visible light
- 10:35Success rates with synthetic NIR
- 11:39Attack demonstration
- 12:01Limitations and disclosure
related talks
14mBreaking Infrared Recapture Detection: Optical-Synthesis Attacks and Depth-Aware...
26mVirtual U: Defeating Face Liveness Detection by Building Virtual Models...
41mUnlocking Any Door In 21st Century. Immersion In Bio-Security
08mAdvancements in facial recognition
45mYour passport to the 7th continent
16mThe Threat of Deepfakes to Remote Identity Verification Systems
25mBiometric Authentication Under Threat: Liveness Detection Hacking
40mNew Face, Who Dis? Protecting Privacy in a World of Surveillance