IPhone X Face ID security peeled away again by 'artificial twin' mask

The experts found out that stone powder can replace paper tape to trick Face ID' AI at higher scores. And they are more than a little inspired by the iPhone X.

Additionally, Bkav noted that Face ID was unable to "learn" to correct its mistake, consistently allowing the "artificial twin" mask to unlock the phone during successive attempts. The company also claims that Face ID is less secure than Touch ID because images of a person can be taken from afar and used to create a mask to unlock the phone.

iPhone X's biometric facial recognition feature has so far been fooled by a ten-year old, twins and a mask.

Using a new mask apparently built for around $200 using materials such as stone powder and a 3D printer - which should be obtainable by most people - the researchers shot a video showing the iPhone X unlock for it. "Face ID is even attention-aware".

In this clip, we see the researcher capture his Face ID profile in real time. As soon as the iPhone X became available for sale, they immediately conducted experiments based on previous analysis to confirm the "foreseeable" weakness, and just as predicted, Face ID was defeated by the mask.

One of such features is that the iPhone X does not bring the new notifications to the screen until it is sure that you are the owner of the iPhone and are attentive towards the phone.

"About two weeks ago, we recommended that only very important people such as national leaders, large corporation leaders, billionaires, etc., should be cautious when using Face ID", said Ngo Tuan Anh, Bkav's vice president of cybersecurity. This feature is reportedly meant to prevent Face ID from being unlocked with a mask or photograph or when you are looking away from your phone.

A customer sets up Face ID on his new iPhone X at the Apple Store Union Square on November 3, 2017, in San Francisco, California.

Since the unlocking could be performed so easily this time, Bkav has raised its warning level, suggesting that even ordinary business users should avoid using Face ID as a legitimate security feature.

This is not the first time Face ID has been fooled.

  • Joey Payne