I don't know if this is a good site to ask this question but it's the best fit I've found so far.

I've started signing up to cryptocurrency exchanges. Many of them require users to send digital copies of two pieces of ID, one of which must be a passport, in order to verify my identity. Further, they require me to use WebRTC to take a photo of myself holding the passport and a note containing the website name and the current date.

I understand their desire to verify my identity, but passports contain more information than they need (they just need my name and address) and it opens me up to identity theft. Further, as one commentor found out the hard way nothing prevents exchanges from sharing this information with others, intentionally or otherwise.

I have taken upon myself to digitally alter all information in my passport aside from the name and address to prevent its misuse. I'd like to get your advice on how to fool the WebRTC live video feed.

Is there a browser plugin that allows one to configure the browser to send static images instead of a live video feed?

Alternatively, maybe I could point the webcam at a static image on my computer monitor?

Consider this a white-hat challenge ;)

  • er wow this misses on so many points. I mean static images of the same thing? Why not just point the camera at a picture of yourself? How does that fix anything? – candied_orange Jan 13 '18 at 1:48
  • @CandiedOrange the exchange doesn't actually use a video for verification. They are taking a photo using a WebRTC video stream. There is a countdown (5.. 4... 3... 2... 1...) They snap a photo, ask you to approve it, and send it off. So in that sense, a static image would help. I could manipulate that image before sending it off to them. – Gili Jan 13 '18 at 1:49
  • What actual problem are you solving by manipulating the image before sending it off to them? – candied_orange Jan 13 '18 at 1:51
  • @CandiedOrange Manipulating information not found on a driver's license (everything aside from my name and address) to incorrect values so that it cannot be abused. – Gili Jan 13 '18 at 1:52
  • If you want to redact stuff they don't need just black it out or put your thumb over it. If you're trying to falsify that info you've lost your white hat status. – candied_orange Jan 13 '18 at 1:54

Browse other questions tagged or ask your own question.