Security Firm Breached Face ID Using a 3D Printed Mask

Ajustar Comentario Impresión

The researchers concede, however, that their technique would require a detailed measurement or digital scan of a the face of the target iPhone's owner.

X RATED Is Apple's £999 iPhone X the best smartphone EVER? His face was used as the model for the mask and then to unlock an iPhone X on which his face had been registered with Face ID.

Vietnamese cybersecurity firm Bkav built the mask in under a week, for around $150 (roughly £115, AU$200), using a mix of 3D printing, 2D printing and a hand-made nose and skin.

Depending on your level of loyalty to Apple, Bkav's discovery might not have a whole lot of influence on whether or not you buy the iPhone X, but it's handy to know that the Face ID feature isn't totally robust.

The mask used to test the Face ID feature.

All of the above makes plenty of sense too; Apple likes to debut features on iPhone before bringing them to iPad. "We were able to trick Apple's AI, as mentioned in the writing because we understood how their AI worked and how to bypass it", explained the firm in its Q&A style blog on the subject. Apple claims that Face ID is secure and that the odds of a random person gaining access to your phone is 1 in 1 million.

The researchers claim the entire mask used to trick Face ID cost less than $A200 to create. Both the owner and the mask are shown unlocking the phone.

Bkav's claims come despite Apple's statement that the engineering team had collaborated with "professional mask makers and make-up artists in Hollywood to protect against these attempts to beat Face ID".

The firm posted the proof of concept video showing the Face ID hack. Upon successful unlock, Face ID may use the newly calculated mathematical representation-if its quality is sufficient-for a finite number of additional unlocks before that data is discarded. "The recognition mechanism is not as strict as you think", Bkav wrote.

Most iPhone X users have been thrilled with Face ID, but if you find that it's been even a tad wonky, try out the tip above and you should see improved results immediately.

"Time and effort were involved in creating the mask that fooled the Face ID recognition software", says Paul Norris, senior systems engineer at Tripwire.

That was a pretty sophisticated process and proved to not be a serious threat to the iPhone's biometric security measures.

But even if that's true (and we're not certain the clip is to be trusted 100 percent), Bkav's expertise is far from widely available.

Comentarios