New: inside the underground site where "neural networks" churn out fake IDs
- I tested, made two IDs in minutes
- used one to successfully bypass the identity verification check on a cryptocurrency exchange
- massive implications for crime, cybersecurity 404media.co/inside-the-und…
Here's the process of me successfully bypassing the identity verification on OKX, a cryptocurrency exchange I've noticed is being used by criminals
- Asks for passport
- I took photo of my fake British passport I made earlier (didn't need in hand) 404media.co/inside-the-und…
OKX's system said it was reviewing my identity. Then it approved it. There you go: successfully made a cryptocurrency account with a fake name, fake ID. The face is mine (didn't want to implicate innocent person) but site says its going to launch AI faces 404media.co/inside-the-und…
Here are some of the other IDs this service has created. The underlying technology is a bit hazy, but regardless the result is highly convincing photos of fake IDs in minutes for people who have no technical skill 404media.co/inside-the-und…
OKX uses a company called Jumio for its ID verification. When I first asked them about these sorts of sites, they said the below. Then when I said I just bypassed OKX using a fake ID, they said they couldn't comment much furthr 404media.co/inside-the-und…
The British passport I used to bypass identity verification worked first time. I had no issues with it whatsoever. Only reason I didn't use the California license was because OKX doesn't accept US IDs (doesn't have to deal with US regulation) 404media.co/inside-the-und…
Update: @RonWyden comments on our investigation into neural networks + fake IDs. Says it shows the need for secure, authenticated IDs 404media.co/inside-the-und…
Here is the panel for creating your own fake ID in minutes. Enter whatever data you want, or use some of the randomise buttons. Upload a photo or use one the system has. Hit generate. 404media.co/inside-the-und…
Updated with a statement from OKX on us using an underground service which generates photos of fake IDs, and using that to bypass their identity verification 404media.co/inside-the-und…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
New from 404 Media: police freaking out at iPhones stored for forensic examination mysteriously rebooting themselves. This makes brute forcing much harder. Cops hypothesize Apple pushed an update that tells nearby iPhones to reboot if not on phone network 404media.co/police-freak-o…
Here is the law enforcement document I obtained. It says that a bunch of iPhones were in an AFU state (easier to get data from). Then a bunch of them rebooted into a BFU state (much harder if not impossible to get data from) 404media.co/police-freak-o…
This applied to phones that were in Airplane mode, and even one in a faraday box 404media.co/police-freak-o…
Did you vote in America yesterday? If so, you just got doxed
This site takes voter records that can be hard to source and puts them all into one place. Name, address, voter history, for free. It turns voting into a privacy and security risk 404media.co/voted-in-ameri…
Taking data that is only technically a public record and making it easier to access qualitatively changes it. It becomes literally public. It can be the difference between a data point somewhere, and harassment, suppression, threats 404media.co/voted-in-ameri…
I seriously doubt that many people realise when they vote that their address will end up on this right-wing website that is used by conspiracy theorists. Just another opaque data supply chain 404media.co/voted-in-ameri…
New: inside the US government-bought tool that can track phones at abortion clinics. Called Locate X, it tracks phones around the world without a warrant. Leakers showed it in action, we watched a phone go from Alabama, to an abortion clinic, back again 404media.co/inside-the-u-s…
This is the strongest demonstration of the power of phone location data yet. Locate X is a tool used by lots of US agencies (ICE, CBP, etc). Sources got access, filmed themselves using it, leaked us hours of footage. Monitored mosques, synagogues, more 404media.co/inside-the-u-s…
Here is what we saw about a visitor to an abortion clinic. Started in Alabama, where abortion illegal. Mapped their route to stores. Crossed to Florida, went to the clinic for two hours, came back. Just with a few clicks of a mouse. 404media.co/inside-the-u-s…
New from 404 Media: we've found exactly how a Musk-funded PAC is microtargeting Muslims & Jews with opposing messages. Happening with adverts on Snapchat; digging through data we found the exact ZIP codes the PAC is targeting. Includes areas with mosques 404media.co/this-is-exactl…
New from 404 Media: someone put facial recognition on Meta's smart glasses to instantly dox strangers. You look at them, sends face to a facial recognition tool. LLM infers name, sends to people site. Gets phone number, address. I've seen it in action 404media.co/someone-put-fa…
This is absolutely one of the craziest privacy stories I've ever reported, and craziest privacy projects I've ever seen. You can see my face while they demo'd the product to me. Mostly using off-the-shelf tech. People can do this now 404media.co/someone-put-fa…
The creators say they have tested it on unsuspecting people in public, approached them with their personal info. I identified one of the people in their demo, she didn't respond to request for comment. 404media.co/someone-put-fa…
New from 404 Media: in a massive shift, Telegram says it now *will* provide user data to authorities in response to legal orders. Includes IP addresses and phone numbers. Yesterday privacy policy said just terror suspects. Now it is crimes more broadly 404media.co/telegram-chang…
Just last week I found a U.S. demand for Telegram data. It appears to relate to child abuse image crimes. Documents are sealed, but order granted the application for a search warrant for user data 404media.co/telegram-chang…
I've been looking into Telegram and its data policies for law enforcement. For that, I tried its bot which is supposed to give copies of Telegram's transparency reports. Last week it didn't even work. Today, it says data is coming 404media.co/telegram-chang…