Risk
6/18/2013
12:04 PM
Connect Directly
RSS
E-Mail
50%
50%

FBI Driver's License Photo Searches Raise Privacy Questions

Facial-recognition software advances allow law enforcement and government agencies to match images of unknown suspects with government-issued ID photos.

The FACE unit, which has been operating since 2011, "accepts unclassified photographs of subjects of FBI investigations (probe photos) and uses facial recognition technology to compare those photos against FBI database, other federal photo databases to which the FBI legally has access, and photo repositories from states that have entered into agreements with the FBI to share data," according to a related FBI privacy threshold analysis report, which was obtained by EPIC.

"After comparison and evaluation, the FACE services unit returns to the FBI case agent or analyst candidate photos that are likely matches to the probe photo, with the caveat that the candidate photos may serve only as investigative leads and do not constitute positive identification," according to the privacy threshold analysis.

Beyond the FBI, many state and local law enforcement agencies have long been allowed to access driver's license information for suspects who have been identified during the course of an investigation. For states that allow police to access facial-recognition search software for driver's license photos, some limit searches to only certain types of trained investigators, while others allow searches to be conducted only from headquarters.

But using facial-recognition software now provides police with the potential to take a photograph of an unknown suspect or "person of interest" and work backwards until they can positively identify the subject. In a case cited by the Post, for example, during the course of a homicide investigation, a tipster pointed Las Vegas police to a photograph of an unidentified woman and said she had lived in Nebraska. Taking the image and using facial-recognition software to compare it with Nebraska driver's license photographs produced a hit, which lead to investigators cracking the case.

"That picture hung on our wall for a long time," Betty Johnson, Nebraska's vehicle services administrator, told the Post. "We are pretty darn proud of that one."

Previous
2 of 2
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6306
Published: 2014-08-22
Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors.

CVE-2014-0232
Published: 2014-08-22
Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1)...

CVE-2014-3525
Published: 2014-08-22
Unspecified vulnerability in Apache Traffic Server 4.2.1.1 and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

CVE-2014-3563
Published: 2014-08-22
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

CVE-2014-3587
Published: 2014-08-22
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists bec...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.