Face ID cracked with an elaborate mask

28 November 2017
A couple of weeks ago, the same cyber security research firm was able to crack Face ID using a previous version of this mask.

Sort by:

  • D
  • AnonD-711468
  • 3A7
  • 28 Nov 2017

Anonymous, 28 Nov 2017You obviously have not used it. I don't even think about it... moreOf course it's better. It's not even in the same universe of good.

It's passive biometrics people, the holy grail of security!

A bit of how there are people still arguing for LCDs despite the fact that the dream of picture quality was *always* (from the 40s even) individually emitting diodes making the images is *finally* here (OLED).

We live in the future and some people insist on arguing for the past. No man or woman with an intact mind would use an LCD after getting used to a (good) OLED.

No man or woman with a well-working mind would even think about active biometrics (fingerprint or similar) after having used passive biometrics.

For better or worse Apple did it first. For better or worse Apple is tech innovator these days, it's sad (given her prices), but it's true.

    • ?
    • Anonymous
    • MZZ
    • 28 Nov 2017

    Samarth N8 808 user, 28 Nov 2017Suddenly, the good old pattern seems awesome, right?I think pattern is the best and most secure option for lock screen

    It can't be faked and it is harder to remember than 4 numbers pin code

      This took a lot to crack.... About as much effort as lifting someone's fingerprint.

        • ?
        • Anonymous
        • 3DR
        • 28 Nov 2017

        AnonD-24741, 28 Nov 2017This is an early "how to" guide. Showing that you can hack ... moreyes but u still need that persons phone and not just the mask. a lot of effort is needed but im pretty sure getting fingerprints is easier to get. such as people finish their drink in a pub, they leave finger prints on the glass. pinch the glass, use detective skills to get the fingerprint and voila.
        both options not easily done.
        so I guess anything can be mimicked on any product on any device. but if device belongs to apple, then haters come crawling out. sad

          • ?
          • Anonymous
          • 3DR
          • 28 Nov 2017

          Akinaro, 28 Nov 2017As far as I saw, even if FaceID work good, its damn hilario... morenot really. u don't have to point it at your face, don't have to raise the phone at all, u just look at the screen at any angle and its unlocked

            • D
            • AnonD-714050
            • 7kY
            • 28 Nov 2017

            The blinking part also doesn’t seems to be same cus same infrared eye images can be taken and used on a socket movable eye inside the dummy face,one thing that can be used to determine Face ID security is making the AI in IPhone such that it prompts to again use passcode if 2 fail attempts taken,but that’s also not sure succes method,these companies uses many iPhones to test that once they find the solution they do it clearly. The al in Iphone still needs to be improved the algorithm for human muscle detection should be added so that the change in muscular angles and motions in face can be recorded in real time.

              • ?
              • Anonymous
              • 7Xm
              • 28 Nov 2017

              Anonymous, 28 Nov 2017You didn't read the article apparently... In short they ... moreYou might have read the article but failed to understand it.
              It says there that you would need a very high resolution of the owner and the iPhone to do this trick. Both of which you won't need to kidnap the owner just the phone. It may sound measly to you but this has an implication in national security and in the legal system. Remember the fiasco when the police tried forcing apple to unlock a device owned by a criminal? Apple didn't budge though but with this kind of loophole in FaceID, anyone with great interest on the data on your phone wouldn't need Apple anymore.

                • ?
                • Anonymous
                • m13
                • 28 Nov 2017

                Akinaro, 28 Nov 2017As far as I saw, even if FaceID work good, its damn hilario... moreYou obviously have not used it. I don't even think about it, its like my phone is not even locked. And I do not wait for that little lock icon to change, like you see some people on youtube do, I just pick it up and swipe right away.

                It does a better job than TouchID at making you not think of the unlock process in my opinion. It works really great, very impressed. And thats just one advantage, other things like not showing the notification until I look at is for example is really nice.

                  • ?
                  • Anonymous
                  • 3A7
                  • 28 Nov 2017

                  Salt, 28 Nov 2017It's less secure. Period. Most secure biometric ever. If anything this test showed that it is most secure than fingerprint (which is notriously easy to hack, all you need is sonething that the victim used (sometimes the phine itself) and then extract the fingeprint from it.

                  Having said that, a password is indeed more secure than any biometric method to this day... too bad that it is bothersome to put it over and over again...

                    • ?
                    • Anonymous
                    • 3A7
                    • 28 Nov 2017

                    Anonymous, 28 Nov 2017Soon China will mass produce custom made mask on the cheap ... moreYou didn't read the article apparently...

                    In short they can't. Said mask should have the characteristics of the person that locked the phone ... in short it's improbable that anyone will ever unlock a phone that way.

                    You have to both kidnap a person, his/her phone *and* manufacture said mask ... it would be much easier to simply use the kidnapped person face for unlock, then remove the face unlock and then let him on his way.

                    Yes faceID can be bypassed, but that is not to say that it can be hacked. If the trouble to bypass any system is greater than the reward you simply don't do it... and since kidnapping comes with a jail sentence, it basically means that this phone js probable the most secure ever deviced (by comparison it was much easier to fool the fingerprint sensor)...

                      • S
                      • Salt
                      • DPT
                      • 28 Nov 2017

                      It's less secure. Period.

                        • D
                        • AnonD-24741
                        • mY{
                        • 28 Nov 2017

                        Flossy420, 28 Nov 2017Nobody This is an early "how to" guide. Showing that you can hack anyone's iPhone if you have access to a 3D printer.
                        Who would use this? Anyone stealing an iPhone to sell it on gumtree? Anyone who wants access to your encrypted files?
                        to elaborate the dangers of this a step further: Is your password manager using face unlock, too? Then say goodbye to everything...

                          • ?
                          • Anonymous
                          • 7Xc
                          • 28 Nov 2017

                          All this negative comments about face id, bet you by next years android phone, they will improve face id like the oneplus 5t, and users will say, face id will be the next big thing. Face id on the oneplus 5t is fast as hell but im just wondering why people is not testing it as extensively as the iphone x 🤷🏻‍♂️

                            Anonymous, 28 Nov 2017who would go out of their way to make these masks to access... moreNobody

                              • D
                              • AnonD-648253
                              • S38
                              • 28 Nov 2017

                              rather than go to all this length, apple should have sticked the finger print sensor on the back.

                                Duel, 28 Nov 2017"As far as I saw, even if FaceID work good, its damn hilari... moreEven with Android 7.1 face unlock you don't need to hold the phone like you're taking a selfie. Face ID is convenient just less secured but Apple doesn't want to admit it

                                  • ?
                                  • Anonymous
                                  • KZ8
                                  • 28 Nov 2017

                                  Anonymous, 28 Nov 2017who would go out of their way to make these masks to access... moreUrm, thief, hackers? And remember dat is a 1000$ smartphone to steal..

                                    • ?
                                    • Anonymous
                                    • 3DR
                                    • 28 Nov 2017

                                    who would go out of their way to make these masks to access a phone! not worried about this at all tbh

                                      • B
                                      • Bewildered
                                      • 3Jn
                                      • 28 Nov 2017

                                      AnonD-715936, 28 Nov 2017Yeh, you will need to waste more 2+ seconds to smile, not m... moreTotally agree
                                      Apple are notorious for selling old tech as new tech and how much better it is

                                      Just look (face ID) at the massive price hike in having this new tech, which does what exactly open your phone using your face instead if the fingerprint

                                      Before fingerprint phone unlock, my Blackberry 10 attempts then phone wiped but still locked
                                      My Windows even though it has 10^8 possibilities after 5 attempts the phone is prevented from accepting new attempts for increasing lengths of time 5 min, attempts then 10, 20, 40

                                      You can't simply enter indefinitely
                                      So what is Apple selling, simply an alternative, the fact it is a gimmick, a costly one that people are willing to pay us baffling

                                      Look (face ID) at the free advertising, take extra precautions

                                      You had this with pattern id, people would always attempt to guess the pattern, now this masks etc, all you have to do is wait until a person is asleep.

                                      The iPhone X is the bezelless iPhone 8+ with face ID nothing more.

                                      Face id is a biometric, only Apple will make you pay more for another biometric, whether you have fingerprints, face id, or even if iris scan, if you have one, development and replacement should not cost extra.

                                      What these phone makers should have implemented is non removable sim cards (Google Pixel) the problem with stolen phone is you can't issue remote commands once your sim card is removed, if your phone can't be used on another network and can't be turned on as traced then thefts will go down. That is more or better security.

                                        • D
                                        • AnonD-249726
                                        • 6k4
                                        • 28 Nov 2017

                                        Biometrics easily fooled, passcode still the best available security measure ,