Skip to content

chore: Fix Socket Security checkbox status in README #66

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Vladush merged 1 commit into from
Jun 13, 2026
Merged

chore: Fix Socket Security checkbox status in README #66

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -309,7 +309,7 @@ If you use the YuNet model included in this project for research, please cite th
- *Passive:* Frame variance analysis during enrollment (static images = spoof attempt).
- *Active:* Challenges like blink, smile, head turn to prevent video replay attacks.
- [x] **Rate Limiting:** Per-user lockout after failed auth attempts (configurable via `[Security]` in config.ini).
- [ ] **Socket Security:** IPC Socket peer credential verification (`SO_PEERCRED`) to prevent DoS attacks.
- [x] **Socket Security:** IPC Socket peer credential verification (`SO_PEERCRED`) to prevent DoS attacks.
- [ ] **Security Hardening:** Embedding integrity (HMAC), model file verification, and configurable logging.
- [ ] **Privilege Separation:** Transition the daemon from running as `root` to a dedicated `linuxcampam` service user.
- [ ] **Adaptive Enrollment** *(needs investigation)*: Auto-update embeddings when face auth fails but password succeeds. Requires careful security analysis.
Expand Down