Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Privacy Technology

Facial Recognition Creeps Up on a JetBlue Passenger (zdnet.com) 246

An anonymous reader shares a report: A boarding technology for travelers using JetBlue is causing controversy due to a social media thread on the airline's use of facial recognition. Last week, traveler MacKenzie Fegan described her experience with the biometric technology in a social media post that got the attention of JetBlue's official account. She began: "I just boarded an international @JetBlue flight. Instead of scanning my boarding pass or handing over my passport, I looked into a camera before being allowed down the jet bridge. Did facial recognition replace boarding passes, unbeknownst to me? Did I consent to this?" JetBlue was ready to offer Twitterized sympathy: "You're able to opt out of this procedure, MacKenzie. Sorry if this made you feel uncomfortable."

But once you start thinking about these things, your thoughts become darker. Fegan wanted to know how JetBlue knew what she looked like. JetBlue explained: "The information is provided by the United States Department of Homeland Security from existing holdings." Fegan wondered by what right a private company suddenly had her bioemtric data. JetBlue insisted it doesn't have access to the data. It's "securely transmitted to the Customs and Border Protection database." Fegan wanted to know how this could have possibly happened so quickly. Could it be that in just a few seconds her biometric data was whipped "securely" around government departments so that she would be allowed on the plane? JetBlue referred her to an article on the subject, which was a touch on the happy-PR side. Fegan was moved, but not positively, by the phrase "there is no pre-registration required."

This discussion has been archived. No new comments can be posted.

Facial Recognition Creeps Up on a JetBlue Passenger

Comments Filter:
  • by SuperKendall ( 25149 ) on Monday April 22, 2019 @02:20PM (#58472510)

    You had a camera take picture for your passport.

    You had a camera watching you as you drove to the airport. You Cana camera watch you enter the airport. You had a camera watch you go through security, and a camera watch with not a small amount of pity as you tried to eat the airport pizza.

    So why is this one other camera a problem? What about this one additional camera has you so creeped out compared to scores of others seeing you everywhere in public?

    The fact that it could ID you is easily understood from the passport photo. After all the boarding pass is one last step in a more rigorous process you had to use to even get into the boarding area itself, so it doesn't have to be that secure - heck it's more secure than a boarding pass that you could have dropped by mistake and had someone else use. You aren't going to drop your face, so it is actually a tiny bit better while giving up nothing you didn't already give up long ago.

    • by willaien ( 2494962 ) on Monday April 22, 2019 @02:34PM (#58472600)

      It's not this particular incident that bothers me, it's the implications of it all.

      1) It means that the government is storing biometric data on everyone going through airports. This is probably not ephemeral and will be saved forever.
      2) It means that Jet Blue and the US Government are in, some way, sharing biometric data about its users.
      etc.

      • by Anonymous Coward on Monday April 22, 2019 @02:41PM (#58472644)

        It's not this particular incident that bothers me, it's the implications of it all.

        1) It means that the government is storing biometric data on everyone going through airports. This is probably not ephemeral and will be saved forever.

        Uh, yeah. It's called a photo ID. They've been storing that information forever. You have to hand your ID to a TSA agent, who scans it in, before you can even get to the security checkpoint. There are also cameras that take pictures of every passenger who passes through the checkpoint. The 3D scan (unless you opted out) is also saved indefinitely for later review.

        If you are flying, you are giving the government biometric data, and you cannot opt out. It's been that way for years now.

        2) It means that Jet Blue and the US Government are in, some way, sharing biometric data about its users.
        etc.

        Again, not really new. This was for an international flight, and for those, you have to have a passport to board. The passport already contains biometric information on it, that's what the smart chip inside it is for. They already have the passenger manifest and a list of all passports, so it's entirely possible they didn't even need to look up anything from the government, they just made sure it found her face on the "expected passengers" list.

      • Re: (Score:2, Insightful)

        by SuperKendall ( 25149 )

        It means that the government is storing biometric data on everyone

        If by "biometric data" you mean "a photo" (which is the case for this story), they have been doing this for decades now. If you want to go through airport security you have to present photo ID or face extremely rigorous vetting (I had to do this once, forgot my drivers license). And of course as noted - it's optional. It's giving no-one anything they didn't already have.

        It means that Jet Blue and the US Government are in, some way, sharin

        • by willaien ( 2494962 ) on Monday April 22, 2019 @02:53PM (#58472726)

          There's a big difference between "show my driver's license to an agent, who visually identifies me and will forget what I look like 5 seconds after I leave" versus "automated system that will store that data forever".

          It's "just a photo" - that's tied to your identity. That automated systems can use to identify you. I make it sound scary because it honestly is. Imagine a world where "to protect the interests of the store", a system that you cannot opt out of, is used to identify "known thieves" in a store, and links back to national databases. Now imagine if you're falsely accused of a crime, and now you're tagged forever in this system and cannot shop anywhere. The setting is different (store vs airport), but, I could definitely foresee this being a future of this technology. It has moral and ethical concerns.

          • by Obfuscant ( 592200 ) on Monday April 22, 2019 @03:02PM (#58472770)

            versus "automated system that will store that data forever".

            News flash: your passport photo is stored forever. The fact that you boarded that flight is stored forever, whether or not a new picture is attached to that data.

            That horse left the barn so long ago that he's glue on a 1993 postage stamp.

            Imagine a world where "to protect the interests of the store", a system that you cannot opt out of, is used to identify "known thieves" in a store, and links back to national databases.

            Ok. I'm imagining that. (I don't have to -- it already exists. It's called "loss prevention" for most stores.) I'm really scared.

            Now imagine if you're falsely accused of a crime, and now you're tagged forever in this system and cannot shop anywhere.

            Why not just imagine that you're falsely accused of a crime and executed on the spot? It's about as realistic. Yes, I can make up absurd stuff, too.

          • Imagine a world where "to protect the interests of the store", a system that you cannot opt out of, is used to identify "known thieves" in a store, and links back to national databases

            Pretty sure this already exists.

            Now imagine if you're falsely accused of a crime

            Then I'd be pretty damn happy a system of cameras was in place to show I was in fact innocent! In fact the more the better.

            now you're tagged forever in this system and cannot shop anywhere.

            Actions have consequences. You say the danger is in th

          • It's "just a photo" - that's tied to your identity. That automated systems can use to identify you. I make it sound scary because it honestly is. Imagine a world where "to protect the interests of the store", a system that you cannot opt out of, is used to identify "known thieves" in a store, and links back to national databases. Now imagine if you're falsely accused of a crime, and now you're tagged forever in this system and cannot shop anywhere. The setting is different (store vs airport), but, I could definitely foresee this being a future of this technology. It has moral and ethical concerns.

            The future? This article from MacRumors, dated today, April 22nd, describes a situation similiar to you described currently occuring in an Apple Store:

            Ousmane Bah, an 18-year-old from New York, is suing Apple for $1 billion for false arrest, reports Bloomberg.

            According to Bah, Apple's in-store facial recognition software mistakenly linked him to a series of thefts from Apple Stores, leading to his arrest back in November.

            https://www.macrumors.com/2019/04/22/student-facial-recognition-false-arrest- [macrumors.com]

          • Now imagine if you're falsely accused of a crime, and now you're tagged forever in this system and cannot shop anywhere.

            Non-sequitur. Why would being falsely accused tag you forever in a system? You're accused so you get to defend yourself in any western legal system.

        • by Sir Holo ( 531007 ) on Monday April 22, 2019 @02:58PM (#58472740)

          You make it sound super duper scary when you change "photo" to "biometric data" but it's just a photo dude, chill.

          The problem is what they are doing with the photo. It's not a human scrutinizing it, it's a computer that will phone home, keep the additional photo, run it through some learning algorithms, and in the end be far more powerful than the old way of having a human look at a boarding pass.

          Concentrated power is a dangerous thing.

          • the old way of having a human look at a boarding pass.

            Humans haven't been "looking at a boarding pass" for a very long time. Each gate has a scanner that scans the QR code on the boarding pass, and the computer will "phone home" to record the fact that "Sir Holo" boarded "Flight 349" at "2:39PM". If it's an international flight, then that data will be matched up with the traveler data and sent off to the US government.

            Humans only get involved in the boarding process when 1) someone sitting in the exit row tries to pre-board as disabled (I actually saw that h

        • by Shotgun ( 30919 )

          Did they even have to send the photo, or did the camera have some firmware that would calculate the recognition points and look that up and compare it with what they have stored for expected passengers of the airplane.

          Facial recognition comes down to the triangulation of a handful of numbers, which makes data lookup incredibly fast, and eliminates the need to send a high resolution photo.

          • Did they even have to send the photo, or did the camera have some firmware that would calculate the recognition points and look that up and compare it with what they have stored for expected passengers of the airplane.

            I was wondering the exact same thing, but I didn't want to complicate the issue with talk official hash and kinds of caching... I do think it likely you are right as to what is really going on. Still based on just the photo, don't think anyone with consumer facing cameras is using any 3D faci

      • by AmiMoJo ( 196126 )

        This is why it's important for all this stuff to be opt-in. One of the best aspects of the GDPR is no more "click here to opt out of all the bullshit", they have to explain exactly what they want and get you to affirmatively agree to it.

      • by Matheus ( 586080 ) on Monday April 22, 2019 @05:43PM (#58473884) Homepage

        Um.. not really. SO Since I built some of this (on the back end)

        1) Do you have a US Passport? Have you obtained a Visa to enter the US? Have you ever been in the military or entered a US military controlled space (like a base)? Have you ever been arrested/worked in law enforcement? -- If yes to any of those then your face is in one(or more) of 4 different government biometric databases.
        2) SO to your #1: Not saying they for sure aren't collecting imagery from the airport for search BUT in-the-wild enrollment is nearly useless. They are scanning random faces checking against a watchlist but they are NOT "enrolling" with that data.. crappy enrollment data just makes the performance of the gallery worse.
        3) The only sharing required for this article's situation is exactly: The picture taken at the gate is templated and that template is queried against the central biometric database (in this case US Passport) at which point a Match/NoMatch/Who Is This Face response is returned. The Gov't is giving exactly that boolean to JetBlue and JetBlue is giving exactly a sample for verification to the US Gov't. (Biometrics-As-A-Service... it's been a thing for a LONG time)
        4) Chances are (from a purely logistical standpoint) this is a "Candidate Search" meaning they are checking your template against the specific list of passengers registered for that plane so it's not even "Who is this from our entire database" but "is this person one of this small list of expected people". WAY faster search and WAY easier to return a boolean Yes/No instead of a range of likelihood scores.

        OMG JetBlue took my picture at the gate and stored it or gave it to the US government!? No they didn't. they didn't need to. The Gov't already had your picture (among many other things) and JetBlue had no need to keep it any longer than the time it took to complete the candidate search. It does them no good to do otherwise.

        Hate biometrics all you want but dammit I wish people understood the technology better. Also, non-sequitur, you have no privacy and have no security. The sooner that is understood the less stressful life becomes.

      • "Biometric" sounds so sinister, call it what it really is - a surveillance tape, just like countless convenience stores do every day.

      • by rastos1 ( 601318 )

        2) It means that Jet Blue and the US Government are in, some way, sharing biometric data about its users.

        I'm definitely not in favor of the government surveillance but how about this: the company captures your photo, asks you for your name (or checks your passport) and sends a query to the government-run system: "we have a person here that looks like {photo} and claims to have {name} - does that check out in your system?" and the system returns true/false.

        Or even less intrusive: the company captures your

      • 1) It means that the government is storing biometric data on everyone going through airports. This is probably not ephemeral and will be saved forever.

        This has been the case for well over 10 years. Or did you miss the introduction of biometric passports 15 years ago?

    • Re: (Score:2, Interesting)

      by ledow ( 319597 )

      Because, unlike my passport, I know that nobody else had my passport and is using it for international travel, forming official records of the country they visited, time and date and linking myself to whatever they do on the plane or elsewhere in my name.

      She walked up to the plane, it "recognised" her face, let her board. That's not what facial-recognition-at-the-border is for. That's not what passports and passport control are for.

      Someone who "looks a bit like me" could easily book themselves on a plane

      • Because, unlike my passport, I know that nobody else had my passport and is using it for international travel,

        You might know that but nobody else does. And if you haven't seen your passport today then it might have been stolen or borrowed and is being used for international travel. Sheesh.

        She walked up to the plane, it "recognised" her face, let her board. That's not what facial-recognition-at-the-border is for.

        That's what Jet Blue was using it for.

        someone just needs to look a bit like you, and book a ticker in your name.

        And, of course, show a passport at check-in and then another photo id at the TSA checkpoint. No, it's not "just needs to look a bit like you", it's look like you and have your id and passport in their possession.

    • by Gr8Apes ( 679165 )

      You had a camera take picture for your passport.

      You had a camera watching you as you drove to the airport. You Cana camera watch you enter the airport. You had a camera watch you go through security, and a camera watch with not a small amount of pity as you tried to eat the airport pizza.

      So why is this one other camera a problem? What about this one additional camera has you so creeped out compared to scores of others seeing you everywhere in public?

      First, who said I'm ok with all those other cameras? But, let's not delve into rabbit holes. Staying on topic:

      The fact that it could ID you is easily understood from the passport photo. After all the boarding pass is one last step in a more rigorous process you had to use to even get into the boarding area itself, so it doesn't have to be that secure - heck it's more secure than a boarding pass that you could have dropped by mistake and had someone else use. You aren't going to drop your face, so it is actually a tiny bit better while giving up nothing you didn't already give up long ago.

      No, it's not more secure than a boarding pass. The boarding pass combined with passport confirm a) name, b) that you're supposed to be on the flight, and c) that it's really you.

      Why is it not more secure? Well, based off of numerous studies of face recognition software, it appears there's a miss rate of more than 1%. Would you be comfortable with more than 1 out of every 100 people being incorrect

      • The boarding pass combined with passport confirm a) name, b) that you're supposed to be on the flight, and c) that it's really you.

        You are ignoring one detail: at the point you get on the plane all you show is a boarding pass. You could easily hand your boarding pass to someone else and they got on the plane instead of you. Like, if your brother-in-law is a known criminal fleeing prosecution who bought a ticket for a local trip, and you give him your boarding pass so he can board your international flight to someplace with no extradition treaty with the US.

        This is better than just a boarding pass.

        Well, based off of numerous studies of face recognition software, it appears there's a miss rate of more than 1%.

        So there's a 1% chance it will let th

      • Why is it not more secure? Well, based off of numerous studies of face recognition software, it appears there's a miss rate of more than 1%.

        Having the final passenger manifest means you don't have to pick an identity from the entire universe, it only needs to pick you from the few hundred passenger on the manifest - I suspect that minimizes 'misses'.

        Also, anyone not in the database can be added as soon as they "look ibto the camera" and they aren't identified... the machine just beeps, then waits for the operator to feed in the verified from state-issued-ID identity of the face just captured, adding it to the database and making the system more

    • You had a camera take picture for your passport.

      What if you don't have a passport?

      Most Americans don't have and likely will never need a passport.

      • What if you don't have a passport?

        Then you don't have to worry about facial recognition equipment scanning your face at an international boarding gate and the government getting access to a picture of you that they will keep forever maybe. Unless you are trying to sneak out of the country illegally, in which case it's a good thing that they're going to catch you before you cost the airline money carting your ass to some foreign place you can't enter because you don't have a passport to get beyond their immigration checkpoint and the airline

    • It's not the camera, it's the database, and who gets access to it and how access to it is policed, if at all,

      While it is technically possible for Homeland Security to offer a secure biometric id service, the practice as a whole is insecure because nothing prevents the airline or its employees from using the camera data and authenication service to amass its own verified biometric database, or to sell that data to possibly malicious parties.

      There's all kinds of bad things that could result from this, but as

    • by sjames ( 1099 )

      A human comparing your face to your passport/ID cannot be done without your knowledge and at least grudging consent.

      In this particular case, it was done openly, but the passenger obviously understood that since DHS is so very cooperative, it could easily be done without knowledge or consent for purposes well beyond identification for international travel.

  • Szell! Szell! Der weisse engel!
    (100 quatloos for whoever recognizes the movie reference without searching)
    • by Joviex ( 976416 )

      Szell! Szell! Der weisse engel! (100 quatloos for whoever recognizes the movie reference without searching)

      Best dental scene ever.

  • by Kohath ( 38547 ) on Monday April 22, 2019 @02:43PM (#58472664)

    Facial recognition tech exists. Therefore it will be used. It's getting better and cheaper, therefore it will be used more and more. That's the reality. It is inevitable.

    You can't hold it back. Trying is a waste of time and diverts attention from measures that might help.

    You need to reform/police the institutions that you imagine might abuse the tech.

    • Facial recognition tech exists. Therefore it will be used. It's getting better and cheaper, therefore it will be used more and more. That's the reality. It is inevitable.

      You can't hold it back. Trying is a waste of time and diverts attention from measures that might help.

      You need to reform/police the institutions that you imagine might abuse the tech.

      And it is just as likely to exhonerate you as convict you. I wave to all the security cams I see, and make certain they get a good look at my face.

    • You need to reform/police the institutions that you imagine might abuse the tech.

      If one thing is 100% certain it's that the "imagination" of people knows no bounds. No logical bounds, no common sense bounds, and in some cases in this very comments section that imagination isn't even bounded by a sense of reality.

      If you want to reform anything you better come with a) evidence, and b) a detailed description of the process which allowed the abuse to happen. Otherwise ... "I imagine my face is somewhere in the government so the department of animal welfare is going to get PETA to come and k

  • Comment removed based on user account deletion
  • > "You're able to opt out of this procedure, MacKenzie. Sorry if this made you feel uncomfortable"

    Two lies right there. The first one is subtle: you can opt out but it will take extra efforts and most people won't bother. It's always easier to just go along with whatever the surveillance state wants. If you question or challenge anything then you are a problem and will probably end up on all kinds of lists, ironically with more surveillance not less.

    • What would opting out accomplish? The camera is still on, they probably still do the lookup - but then they do the manual verification anyway?

  • This is a solution looking for a problem. People getting onto airplanes is not 'a thing'. It very rarely happens.

    Regardless, the invasion of privacy for a non-problem is problematic.

  • Wrong question. (Score:5, Interesting)

    by rickb928 ( 945187 ) on Monday April 22, 2019 @03:01PM (#58472766) Homepage Journal

    "by what right a private company suddenly had her bioemtric (sic) data. "

    Wrong question. More to the point, "by what right a private company suddenly had permission to use her bioemtric (sic) data, without her express permission."

    And of course, the answer will always be either 'you agreed to, right here, somewhere', or 'it's the government, and they have the right because you...'

    Rights and permissions are not entirely the same thing.

    • Wrong question. More to the point, "by what right a private company suddenly had permission to use her bioemtric (sic) data, without her express permission."

      The private company isn't using her bio-metric data, they are transmitting it to Homeland security who are using it and then giving a yay or nay response. Please think before you post. Or do you want to take your argument to the next logical place: "How dare the private company suddenly give a person's name to look up a no-fly list!"

  • She was imprudent (Score:5, Interesting)

    by forkfail ( 228161 ) on Monday April 22, 2019 @03:32PM (#58472936)

    Doesn't this MacKenzie Fegan know that she will lose social credit points for showing disrespect for necessary security measures, and diminishing and degrading harmony?

    Would she rather have her face available for necessary and virtuous safety measures, or not be able to travel because of her rebellious nature?

  • The FIRST time you clicked on a TOS agreement, we started down this road. No one reads them. Then, when smartphones came along, it was "for your safety and security". TSA/Homeland was CONVENIENTLY developed around 9/11, "for your safety and security". 1984 was just a few years late, that's all. Instead of "SHOW ME YOUR PAPERS", it will be, 'GIVE ME YOUR BIO DATA...OR ELSE".
  • Start radically changing your appearance when you go out in public each time?
    Scarring makeup (ala Heath Ledger's Joker) is easy to get and easy to apply. Dye your hair, wear a bandana, hat, sunglasses, coloured contacts, fake (or real, if you have the time for it) beards?

    Just throwing this idea out there, if you are going to be tracked and monitored everywhere you go, might as well change things up...

  • by WillAffleckUW ( 858324 ) on Monday April 22, 2019 @04:48PM (#58473544) Homepage Journal

    Unlike biometric data, this was using bioemtric data, which is the EM waves your aura gives off when you flouresce under kirlian photometry.

    In the brave new world, no Taureans will be permitted to fly.

  • Could it be that in just a few seconds her biometric data was whipped "securely" around government departments so that she would be allowed on the plane?

    1. When did your passport picture morph into 'biometric data'?

    2. Why did she think it only took 'a few seconds'? I'm guessing the government has had her passport photo for a while now. And unless she purchased her ticket just a few seconds before she entered the plane, they would have had LOTS of time to send a request for and receive her photo.

    This person seems to be trying to make this system sound way scarier and intrusive than it really is.

  • Seriously? She apparently thought nothing of it when she looked in the camera, it was only later when she got upset. First she wondered how the airline knew what she looked like, and learned it's the govt that has her face captured. Then she was upset because it was so fast - to be fair, the airline could easily have taken the passenger manifest, uploaded it to govt servers, to 'preselect' images to compare passengers with. There is no reason to query a 300 million image database to find one of the several

  • by Kagetsuki ( 1620613 ) on Tuesday April 23, 2019 @01:14AM (#58475600)

    There's several factors here - one is probably her passport, which is linked to a database with biometric markers that can be checked against. The other is probably when she bought her tickets - there was likely a note in the EULA/purchase contract which she ignored. Opting out of this isn't going to erase your information from a government database - it's just going to take you longer to get through the line to get onto your plane.

    I don't like it either, but I have to admit it has proven convenient.

It is easier to write an incorrect program than understand a correct one.

Working...