From 0b5684b1d63eb8ab62798386f8e882826fd0bb62 Mon Sep 17 00:00:00 2001 From: Vladush Date: Sun, 14 Jun 2026 00:02:25 +0200 Subject: [PATCH] chore: Fix Socket Security checkbox status in README Adjust README.md to reflect current project status --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 983dabe..3f1bf9b 100644 --- a/README.md +++ b/README.md @@ -309,7 +309,7 @@ If you use the YuNet model included in this project for research, please cite th - *Passive:* Frame variance analysis during enrollment (static images = spoof attempt). - *Active:* Challenges like blink, smile, head turn to prevent video replay attacks. - [x] **Rate Limiting:** Per-user lockout after failed auth attempts (configurable via `[Security]` in config.ini). -- [ ] **Socket Security:** IPC Socket peer credential verification (`SO_PEERCRED`) to prevent DoS attacks. +- [x] **Socket Security:** IPC Socket peer credential verification (`SO_PEERCRED`) to prevent DoS attacks. - [ ] **Security Hardening:** Embedding integrity (HMAC), model file verification, and configurable logging. - [ ] **Privilege Separation:** Transition the daemon from running as `root` to a dedicated `linuxcampam` service user. - [ ] **Adaptive Enrollment** *(needs investigation)*: Auto-update embeddings when face auth fails but password succeeds. Requires careful security analysis.