Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
The resemblance between those two is tight. Still should not have happened. The training process should have refused to work in the bad lighting.
That’s the key. Initial training done in poor light, so I bet fewer data points were stored. Higher likelihood of matching in that case. Enroll your face in good light. That’s something that can be adjusted in an update.
 
Funny seeing these interrogation-style questions from some posters.

  • How LONG did the user train Face ID?
  • How MUCH TIME was Face ID used before giving it to her son?
  • Did they use the PASSCODE?
  • How MANY TIMES did they use the passcode?

These days, you have to be pretty technical to use Face ID.

Whatever happened to, "I set up Touch ID and I'm confident no one else can get in"?
 
So, the iPhone X is estimated to sell between 25-27 million units this holiday quarter. And what is the supposed reliability of the FaceID? 1 in a million? So there are likely people out there that it doesn't work reliably for (with a low light capture)? I'M SHOCKED!!!
 
Funny thing is I predicted stuff like this would happen when it came out and everyone kept saying no it won't.

Really this is a gimmick and they should have kept both it and Touch ID for at least a couple generations. Taking out a known working concept for one that is an Alpha feature (I can't even justify giving it Beta status) was a bad idea.
 
  • Like
Reactions: jdillings
Do we know how the phone was trained, and how much time it was used before it given to her son? If the password was ever entered just before the device saw his face for the first time?

Like the mask, it lacks full context.

We're talking about real world usage here - how real people are using Face ID with their purchased iPhones. Any special considerations (e.g. "how the phone was trained") are basically irrelevant.

Additionally, the article explicitly states that a password was never entered.
 



A new video has surfaced of a 10-year-old child unlocking his mother's iPhone X with his face even though Face ID was set up with her face.


The parents, Attaullah Malik and Sana Sherwani, said their fifth-grade son Ammar Malik simply picked up his mother's new iPhone X without permission and, to their surprise, unlocked the device with his very first glance.The younger Malik was then consistently able to unlock his mother's iPhone X, according to his parents. He was even able to unlock his father's iPhone X, but only on one attempt, which he has since been unable to replicate.

iphone-x-face-id-800x475.jpg

WIRED reporter Andy Greenberg suggested that Sherwani re-register her face to see what would happen. Upon doing so, the iPhone X no longer allowed Ammar access. Interestingly, after Sherwani tried registering her face again a few hours later in the same indoor, nighttime lighting conditions in which she first set up her iPhone X, the son was able to regain access with his face.

The parents clarified that no one ever entered the iPhone X's passcode after any of the failed unlocking attempts. That's important, since when Face ID fails to recognize you beyond a certain threshold, and you immediately enter a passcode, the TrueDepth camera takes another capture to improve its reliability.

Apple explains in its Face ID security paper:Given no passcode was ever entered, we can assume that Face ID never learned and adjusted for the son's face.

The same Face ID security paper states that the probability of a false match is higher among children under the age of 13, because their distinct facial features may not have fully developed. Given the child is only 10 years old, and Apple's information, what's shown in the video isn't a surprising flaw.

Nevertheless, the video is further evidence that Face ID isn't 100 percent foolproof given just the right circumstances. If you are concerned about this, Apple merely recommends using only a passcode to authenticate.

In related news, Vietnamese security firm Bkav recently shared a video in which it was able to spoof Face ID with a mask. The video is generating headlines since Apple said Face ID uses sophisticated anti-spoofing neural networks to minimize its chances of being spoofed, including with a mask.


The mask was supposedly crafted by combining 3D printing with makeup and 2D images, with some special processing done on the cheeks and around the face. Bkav said the supplies to make it cost roughly $150.

We're skeptical about the video given the lack of accompanying details. For instance, Bkav hasn't specified whether it disabled Face ID's default "Require Attention" feature, which provides an additional layer of security by verifying that you are looking at the iPhone before authentication is granted.

Even if the video is legitimate, it's hardly something that the average person should be concerned about. The chances of someone creating such a sophisticated mask of your facial features would seem extremely slim.

Apple so far has not responded to the videos, beyond pointing reporters to its existing Face ID security paper we linked to above.

Article Link: 10-Year-Old Unlocks Face ID on His Mother's iPhone X as Questionable Mask Spoofing Surfaces
I would like to see it when a woman uses makeup. Will it still recognize her if she sets up with no makup and then proceeds to put on her normal amount? Light or heavy will both make a difference. Iris scanner is still much better.
 
when Face ID fails to recognize you beyond a certain threshold, and you immediately enter a passcode, the TrueDepth camera takes another capture to improve its reliability.
“Mama! Your phone won’t unlock! I want to play games!” While looking at phone (activating and failing Face ID)

Mom comes and unlocks phone.


Voila. Mom taught phone to recognize son’s face.
 
Give it a rest already. these two humans have similar facial features snd once gain its a family member which he will grow to have a different look in a few years. FaceId learns and of course putting a new device and testing fid yields immature results. I am willing to bet all these faceid unlocks will not work in the next few months as the true dept camera will have learned a lot about its user by then.
 
it's not even technical matters here...it's people spending their money on something so expensive and basically defending it from any flaws that surfaces. If the faceID doesn't work as well as touchID then just say it doesn't. I see this happening to all types of people buying apple products - the defense of apple products by these types of people is stronger than any NFL team.

Funny seeing these interrogation-style questions from some posters.

  • How LONG did the user train Face ID?
  • How MUCH TIME was Face ID used before giving it to her son?
  • Did they use the PASSCODE?
  • How MANY TIMES did they use the passcode?

These days, you have to be pretty technical to use Face ID.

Whatever happened to, "I set up Touch ID and I'm confident no one else can get in"?
 
why would I pay $1k+ for an iPhone? Regardless of whatever apple is selling, it's all late to the game features. Wireless charging at 5w, when you get 15W with fast charging (Samsung). Of course I can do better and have been. When you parade around with a top model toy that's $1249+ you best make sure your highly touted security feature works flawlessly. Otherwise what is the incentive for owning an iPhone X? It's definitely not the notch, not the lack of headphone jack, lack of wireless fast charging (even fast charging out of the box), lack of NFC read/write, lack of Samsung pay (MST), the list goes on. Worse feature missing is the ability to pause video recording. No thank you!

But you already know that!

7.5w after the next iOS 11 update.
 
I would like to see it when a woman uses makeup. Will it still recognize her if she sets up with no makup and then proceeds to put on her normal amount? Light or heavy will both make a difference. Iris scanner is still much better.
It shouldn’t change. It measures the contours and 3D form of your face. No amount of makeup would be thicker than half a mm at best.
 
Shouldn't it work first time though? Isn't this a fundamental flaw in the technology that it needs to learn over time?
I want my device secure the minute I've completed setting it up. Not one week or a month later.
I fully agree with your statement on security, I am not defending the need to learn, I am disputing the validity of the video and followup claim.

I am also not disputing the knowin issue of Twin / sibling access to devices. There is enough proof that issue exists, and I hope Apple works on tightening down the learning process to make it less of an issue.

On FaceID, I think they tried to make it a bit too user friendly and make the programming faster than TouchID. I don’t think the speed / ease should have taken priority over security.
 
Do we know how the phone was trained, and how much time it was used before it given to her son? If the password was ever entered just before the device saw his face for the first time?

Like the mask, it lacks full context.
Shouldn't MacRumors be putting that question directly to the people posting the video and investigating further?
 
  • Like
Reactions: nicho
Apple will put the finger print sensor under the screen next and tout it as an extra layer of security as you'll need to authenticate with both. And people will cheer. And champaign corks will pop. And some will wink and laugh.
 
That’s the key. Initial training done in poor light, so I bet fewer data points were stored. Higher likelihood of matching in that case. Enroll your face in good light. That’s something that can be adjusted in an update.

why the hell does light matter indoors? It uses infrared. Probably would work even better in NO LIGHT.
 
Last edited:
According to the article in Wired, when the mother rescanned her face in better lighting, her son was not able to unlock the phone. Anyway, this is first gen tech. Imagine the 2nd or 3rd gen of FaceID!

And that's why I'm waiting for rev 2.
 
  • Like
Reactions: Martyimac
That’s the key. Initial training done in poor light, so I bet fewer data points were stored. Higher likelihood of matching in that case. Enroll your face in good light. That’s something that can be adjusted in an update.

Given that Face ID uses the phone's own IR dot generator (w/ 30000 dots), why should ambient lighting matter in the least?
 
I fully agree with your statement on security, I am not defending the need to learn, I am disputing the validity of the video and followup claim.

I am also not disputing the knowin issue of Twin / sibling access to devices. There is enough proof that issue exists, and I hope Apple works on tightening down the learning process to make it less of an issue.

On FaceID, I think they tried to make it a bit too user friendly and make the programming faster than TouchID. I don’t think the speed / ease should have taken priority over security.
MacRumors should put these concerns directly to the people in the video, some investigative reporting, to determine the validity of the article. Major newspapers are asking to reproduce their video for are approaching the
1:1000000 :confused:
The simplicity of your comment is very fine indeed.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.