10-Year-Old Unlocks Face ID on His Mother's iPhone X as Questionable Mask Spoofing Surfaces

[Chupa Chupa]

FaceMagooID stinks high heaven. You paid 1k thinking it was the best. Where are the lawsuits?

I didn't. I paid $1200 (w/ tax) thinking I was getting a bigger screen than my 4.7" and a better camera to go with it. I got exactly what I expected. But Face ID has been an unexpected joy for me to -- just looking at my phone with Safari and I get auto logged into to sites. Magic. Being able to access my phone when wearing gloves and not having to either punch in my code or take my gloves off. Delightful. It making my life a bit less stressful and that is what good tech does. So far haven't found anyone to crack my own Face ID.

 

[oliversl]

"1 in 50 000 000 my as*" ™

 

[jarman92]

Does this look more secure than Touch ID?

Because our uneducated assumptions and knee-jerk reactions have never been wrong before...

 

[Shlooky]

the kids face looks exactly like his mom except for the size and hair.

 

[D.T.]

Something along these lines was discussed on the latest ATP podcast.

I mentioned the same thing in a recent post, that there are - and just simplifying this for this discussion - 3 behaviors:

1) FaceID returns a no match, and the match difference is outside of a specific threshold, user can enter passcode, enrolled facial data (i.e., mathematical representation) is not affected.

2) FaceID returns a no match, however, the difference is within a specific threshold (some combination of ongoing ML + "facial logic" [all that data analysis by Apple]) and when the user enters the passcode, the enrolled facial data is updated.

3) FaceID is a clear, positive match, the white paper indicates is still performs some difference comp vs. the enrolled FID data.

So it's #2 where there's a potential for the facial data to get, let's say "contaminated", with other face data. A few thoughts:

- The data is only updated within the threshold, which I'd imagine is a pretty tight tolerance
- The passcode also has to be known (this isn't really an attack vector, why bother to hack FID if you know the passcode <wink>)
- The threshold might tilt back to the original user as they unlock the phone over time (i.e., there's a repeated set of data that helps to make it more or less reinforced as valid)

 

[ramallite]

Ok, can twins unlock your Touch ID then?

I mean we have quite a few videos showing Face ID being beaten by twins, this is a system they want you to use for Apple Pay, you know that Apple system that is linked to your bank account. And you proclaim it to ‘hyperbolic’.....

Let’s not fo get those banking apps that use Face ID like Touch ID...

I wouldn’t call it ‘hyperbolic’.

Yet another reminder: "The statistical probability is different for twins and siblings that look like you and among children under the age of 13, because their distinct facial features may not have fully developed. If you're concerned about this, we recommend using a passcode to authenticate."
https://support.apple.com/en-us/HT208108

 

[Mike MA]

Regardless if true or not, in practical real world usuage, Face ID is not more secure than Touch ID. Facts.

Facts? How bout some sources?
Of course people can trick Face ID into failing by training it to work on similar faces of two separate people. How is that real world practical usage?

As many people wrote, Face ID is a 1st generation feature. Same counted once for Touch ID. But there‘s one difference - at least for the issues reported mainly throughout the media now and back than:

Touch ID failure almost always meant no recognition and though no access to the device even for its owner. For Face ID it‘s the exact other way round - additional, non permitted people gain access. This is creating awareness, justified or not.

Nevertheless I strongly believe in this technology, even already today.

 

[meerkat1990]

This seems like a big step backwards. No one was ever able accidentally or otherwise access my phone without my fingerprint. Seems this face ID is less reliable. Also, did I read this correctly that if my spouse or kid manages to get my passcode they can enroll their own faces so they can access the phone?

Sorta not feeling this FACE ID...

 

[jarman92]

Source: This kid wouldn't be able to access his mom's phone if it was secured with Touch ID.

Except 1 random person—who is much more likely to have nefarious intentions that one's 10 year-old son—in 50,000 could fool Touch ID whereas only 1 in 1,000,000 people could fool Face ID.


[doublepost=1510692552][/doublepost]

This seems like a big step backwards. No one was ever able accidentally or otherwise access my phone without my fingerprint. Seems this face ID is less reliable. Also, did I read this correctly that if my spouse or kid manages to get my passcode they can enroll their own faces so they can access the phone?

Sorta not feeling this FACE ID...

If your spouse or kid gets your passcode they can open your phone with Touch ID or Face ID. Is that a serious question? Have you ever used an iPhone before?

 

[H818H]

Apple said there would be one in a million anomalies. I am pretty sure they have sold more than one million iPhones.

Besides, her son could qualify as a "twin".

I'd love to see your family tree

 

[nikosl7]

What do parents have to hide from their kids?
If you are a parent with bad habits you do not deserve an iPhone.

 

[jarman92]

"1 in 50 000 000 my as*" ™

The statistic is 1 in 1,000,000 and this article does nothing to disprove that.

 

[Chupa Chupa]

Quick everyone, defend the Apple kinect

Versus defending anecdotal and videos done sans any scientific testing standards? Also Apple never claimed Face ID was 100% foolproof. But really, the doubters should start a GoFund Me campaign to raise money to buy a dozen iPhone X's and have MIT or Cal Tech give it a go to test out Apple's 1:1m claim. It's simply put up or shut up.

 

[ramallite]

What do parents have to hide from their kids?
If you are a parent with bad habits you do not deserve an iPhone.

Some kids are enamoured with the "new" iPhone X and are all too willing to buy mods for the games they play. If a kid's face could authenticate an App store purchase; well, you see the problem.

 

[maverick2007]

Stop production of Iphone X and start producing Iphone 8 / 8+. Not sure why apple reduced production of iphone 8/8+ and increased production of failed iPhoneX - Fail ID.

 

[blackcrayon]

Face-gate.

Jokes aside what do you expect when you pay $1k+ for a smartphone? It should work just give it time. Maybe 7 days until the glue dries. I'll wait for revision #2 or #3.

I'll use the iPhone X, which is the 10th revision (thereabouts) of the original iPhone. It fixes a million things the iPhone "1.0" couldn't do well!

 

[D.T.]

What do you think will happen when your head is wet? Scroll to 3:40 if you want to know.

Don't need some random noise from YouTube, per my post this morning, I personally experienced perfect operation coming out of a pool more than once, I mean swimming up to the edge under water, surfacing, grabbing the iPX, and it immediately unlocked as expected (message from the wife about a drink order Also notable, it was a super bright, sunny, day in Orlando, FL) For me, TouchID didn't fail because of the presence of water, it was because my fingerprints with 10 minutes exposure to water (pool, surfing, SUP'ing, etc.) distorted to where they couldn't be read (I even tried scanning a "prune finger" in advance, but that was a no go).

 

[jarman92]

Some kids are enamoured with the "new" iPhone X and are all too willing to buy mods for the games they play. If a kid's face could authenticate an App store purchase; well, you see the problem.

Or parents could actually, you know, parent and teach their children not to touch or play with things they aren't supposed to.

 

[44267547]

Except 1 random person—who is much more likely to have nefarious intentions that one's 10 year-old son—in 50,000 could fool Touch ID whereas only 1 in 1,000,000 people could fool Face ID.

What baffles me the most, is the amount of people on this forum that have no experience with Face ID or the iPhone X. They just throw out there asinine anecdotal assertions assuming everything is bad because of what they read on a tech forum. Some need to step out of the reality of everything they read on the Internet and experience something for themselves to actually make a fair analysis.

 

[blulegend]

Stop being so paranoid. No one wants your crappy Pokemon or lame pictures of your family get togethers. No one is filming you entering your password.

Do you honestly believe that people will be close enough to film over your shoulder and see the letters you're entering on your screen?

If passwords are good enough for NSA operatives, they should be just fine for most everyone.

Trust the NSA?

 

[apolloa]

Yet another reminder: "The statistical probability is different for twins and siblings that look like you and among children under the age of 13, because their distinct facial features may not have fully developed. If you're concerned about this, we recommend using a passcode to authenticate."
https://support.apple.com/en-us/HT208108

One, they charge a grand for something, then tell you to use technology 10 years plus old, because their latest high tech cutting edge security system doesn’t work.

Two, plenty of videos of older then 13 years old twins unlocking the iPhone X sueccsufully. Unless you’ll claim they are all liars.

Apple has already been in deep trouble for children racking up massive bills through IAP and it’s App Store, and now it’s made an excuse for the security system it advertises as ‘cutting edge’ letting children do this, not sure that’ll stand up.
Tell me, is the statement above buried in Apples support documents, or is it on the main iPhone X website on Apple.com? I mean something this important must surely be plainly obvious fo Jo public to easily see right? Or is this the nine technical consumers fault for not digging through ALL of Apples support and in depth technical documents to know about the risk of their children beating the latest ‘cutting edge’ security system?

It’s just one massive Apple apology really.

 

[ramallite]

Or parents could actually, you know, parent and teach their children not to touch or play with things they aren't supposed to.

Because all kids are obedient 100% of the time? This ain't the Von Trapp family generation, ya know !

 

[acctman]

Funny seeing these interrogation-style questions from some posters.

• How LONG did the user train Face ID?
  
• How MUCH TIME was Face ID used before giving it to her son?
  
• Did they use the PASSCODE?
  
• How MANY TIMES did they use the passcode?

These days, you have to be pretty technical to use Face ID.

Whatever happened to, "I set up Touch ID and I'm confident no one else can get in"?

the average user does not know about all of these extra steps nor does Apple highlight them to where the average user can find them. According to Apple FaceID is more secure than TouchID... there no if passcode, if you train for x amount of time, if you use faceID for x long, etc. Apple shouldn't state the 1:1million can access or that its more secure... cause the general public is just waiting to provide them wrong. In which they are. All of this is just a convenience passcode is the true secure method

 

[Looney01]

TouchID is garbage! Worst authentication method! Failed 99.9% of the time due to sweaty fingers. Spent most of my time typing in my stupid passcode. I hate TouchID, TouchID = FailID. FaceID = awesomesauce! Has not failed me once! No longer do I worry about entering my passcode because my face don’t sweat! No more do I need to wipe dry my fingers and TouchID. FaceID = instant access.

TouchID SUX balls and I’m glad Apple got rid of it. Good riddance to crappy tech.

 

[617660]

They appear credible because of your pre-existing bias against Face ID. And yes do a google search. There certainly were Touch ID spoofs. Heck they were posted here. Like this one:

https://forums.macrumors.com/thread...f-original-fingerprint.1642817/#post-17977807

If anything, this just goes to show that it's much more difficult to fool a TouchID than a FaceID.