Why can synthetic video injected below the camera driver pass your liveness check cleanly?
机会
Liveness detection runs at the application layer, above the OS driver. A camera injection attack intercepts the video stream below that layer, feeding the detector a synthetic face generated in real time that behaves exactly like a genuine camera signal because from the detector's perspective it is one. Group-IB documented 8,065 such attempts against a single financial institution between January and August 2025, and injection attacks on iOS devices surged 1,151% in the second half of 2025 alone. An RSA Conference analysis published in 2026 concluded that ISO 30107-3 PAD certification does not cover virtual-camera and API-level injection, leaving it entirely outside the scope of the only certification most vendors pursue. There is no consumer-level standard for hardware-attested camera feeds, and the entire KYC pipeline assumes the signal entering liveness detection originates from a phy
为什么重要
Every biometric onboarding flow is only as strong as its weakest pipeline layer, and right now that layer is the unattested camera bus.
我如何评估机会
机会评分是我的个人判断，而非量化指标：痛苦程度、发生频率，以及当前解决方案的匮乏程度。分数越高，意味着我认为越值得去构建。
出现时造成的痛苦程度。
人们实际遇到它的频率。
当前针对它的优质工具有多匮乏。