[messaging] Pour one out for "voice authentication"

[Daniel Kahn Gillmor]

On 01/02/2015 11:02 AM, Joseph Bonneau wrote:
> I'm not as sure about that, but it would be an interesting follow-up
> experiment. Without high-quality video (e.g. on a phone over 3G), I wonder
> how many users will notice if you leave the video completely intact and
> simply change the audio? I'd guess most people won't notice.

even in situations where we're used to high-quality video, i suspect
most of us are mentally primed to just ignore brief video glitches,
stutters, or other artifacts.

If you don't have a way to edit the video, but you're an MITM, you could
just degrade the entire video stream enough to produce these artifacts
the entire way through, and/or delay video packets enough to break sync
entirely.  people are remarkably forgiving of degraded video, and our
minds like to "fill in the blanks".

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://moderncrypto.org/mail-archive/messaging/attachments/20150102/dbe2d5f1/attachment.sig>