Skip to content
AI

Why can synthetic video injected below the camera driver pass your liveness check cleanly?

85

Oportunidad

Liveness detection runs at the application layer, above the OS driver. A camera injection attack intercepts the video stream below that layer, feeding the detector a synthetic face generated in real time that behaves exactly like a genuine camera signal because from the detector's perspective it is one. Group-IB documented 8,065 such attempts against a single financial institution between January and August 2025, and injection attacks on iOS devices surged 1,151% in the second half of 2025 alone. An RSA Conference analysis published in 2026 concluded that ISO 30107-3 PAD certification does not cover virtual-camera and API-level injection, leaving it entirely outside the scope of the only certification most vendors pursue. There is no consumer-level standard for hardware-attested camera feeds, and the entire KYC pipeline assumes the signal entering liveness detection originates from a phy

Por qué importa

Every biometric onboarding flow is only as strong as its weakest pipeline layer, and right now that layer is the unattested camera bus.

Cómo evalúo la oportunidad

La Puntuación de Oportunidad es mi propia lectura, no una medición: cuánto duele, con qué frecuencia aparece y qué tan poco existe para resolverlo hoy. Un valor más alto significa que creo que vale más la pena construirlo.

Gravedad9/10

Cuánto dolor causa cuando aparece.

Frecuencia7/10

Con qué frecuencia la gente se topa con ello.

Espacio en blanco8/10

Qué tan pocas herramientas buenas existen para ello hoy.

Más problemas que vale la pena resolver