IPhone X Face ID security peeled away again by 'artificial twin' mask
- Author: Joey Payne Nov 29, 2017,
Nov 29, 2017, 0:29
Additionally, Bkav noted that Face ID was unable to "learn" to correct its mistake, consistently allowing the "artificial twin" mask to unlock the phone during successive attempts. The company also claims that Face ID is less secure than Touch ID because images of a person can be taken from afar and used to create a mask to unlock the phone.
Using a new mask apparently built for around $200 using materials such as stone powder and a 3D printer - which should be obtainable by most people - the researchers shot a video showing the iPhone X unlock for it. "Face ID is even attention-aware".
In this clip, we see the researcher capture his Face ID profile in real time. As soon as the iPhone X became available for sale, they immediately conducted experiments based on previous analysis to confirm the "foreseeable" weakness, and just as predicted, Face ID was defeated by the mask.
One of such features is that the iPhone X does not bring the new notifications to the screen until it is sure that you are the owner of the iPhone and are attentive towards the phone.
"About two weeks ago, we recommended that only very important people such as national leaders, large corporation leaders, billionaires, etc., should be cautious when using Face ID", said Ngo Tuan Anh, Bkav's vice president of cybersecurity. This feature is reportedly meant to prevent Face ID from being unlocked with a mask or photograph or when you are looking away from your phone.
A customer sets up Face ID on his new iPhone X at the Apple Store Union Square on November 3, 2017, in San Francisco, California.
Since the unlocking could be performed so easily this time, Bkav has raised its warning level, suggesting that even ordinary business users should avoid using Face ID as a legitimate security feature.
This is not the first time Face ID has been fooled.