Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Yep, I read this as well. Looks like Apple have their asses covered by saying the probability is "different". Unfortunately, they didn't provide guidance as to how different it is from the 1 in 1 million headline figure. With these recent revelations, it seems like FaceID isn't as secure as one may assume.
yes, but its still first gen first soft algoritms...remember, those 20-30.000dots can have other algorithms in time
 
  • Like
Reactions: VulchR
If you stop and think about this. One could actually see quite the opposite could be the case.

Consider this:

So you register your exact face NOW, and it records an exact view/measurement of your face right now.
That COULD be THE most accurate version of you it can ever have.

If we feel it's accepting of changes over time, such as.
You wear sunglasses or don't
You grow your hair long or shave it.
You wear a scarf or don't
You apply makeup/face jewellery or don't

To allow for these changes, and accept the variations, it will need to slacken off from it's original clean single scan of your face, and need to accept more variations of your face due to the items I've listed or perhaps more.

So in effect the first clean scan could be THE most secure.

Wrong, the two initial scans actually form the least accurate version of your face.

The important part that people aren't realizing is that when you record those two first scans, the phone only registers partial information for both scans.

Each scan after that to unlock your phone adds incremental measurements to the full database of measurements of your face.

Now their is a maximum amount of scanned measurements that are kept in this database of facial scans. Whatever that maximum number is, once its reached, you have your most accurate Face ID.

People need to stop assuming, and read the actual information.

Its also important to note that the phone will NEVER have full measurements of all aspects of your face. Apple prevented this so that if the data is removed from your phone, they wont be able to remake your face.
 
  • Like
Reactions: 0lf and citysnaps
What none of us here know is how Face ID determines that the person looking at the phone is the same as the one who trained it. We also don't know exactly how Face ID learns to accept changes, though Apple says: "If there is a more significant change in your appearance, like shaving a full beard, Face ID confirms your identity by using your passcode before it updates your face data."

It's possible that the system has a tunable threshold for determining a match. If it does, would it be possible to have a setting that requires a higher degree of certainty, even at the expense of the phone asking you for your passcode more often?

It'd also be really interesting to see what happens when people with similar, but not identical, faces go through the two-step Face ID training process.
 
Wrong, the two initial scans actually form the least accurate version of your face.

The important part that people aren't realizing is that when you record those two first scans, the phone only registers partial information for both scans.

Each scan after that to unlock your phone adds incremental measurements to the full database of measurements of your face.

Now their is a maximum amount of scanned measurements that are kept in this database of facial scans. Whatever that maximum number is, once its reached, you have your most accurate Face ID.

People need to stop assuming, and read the actual information.

Its also important to note that the phone will NEVER have full measurements of all aspects of your face. Apple prevented this so that if the data is removed from your phone, they wont be able to remake your face.
Not that there would be a practical reason for doing so, but if multiple people who looked similar took turns getting their faces scanned, would the software form a composite model of all of their faces, thereby allowing any or some of the same people to pass scan security? Most likely not, but it would be an interesting test.
 
I like this. It's great. I like my iPhone 8 Plus with TouchID so much. I have 3 iMacs, 2 Mac Minies, a Macbook Pro, the latest iPad and so on. My appartment is littered with IOT devices and still as soon as I heard of FaceID I thought.... "That's not very well thought through."
 
  • Like
Reactions: miniyou64
OK, who cares, nothing is 100%. Why is it that society must always try to make something fail or find fault?

Touch ID is 100%. Well, at least I haven't heard or read about anyone being able to unlock another persons iPhone with their finger
 
  • Like
Reactions: jdillings
Not that there would be a practical reason for doing so, but if multiple people who looked similar took turns getting their faces scanned, would the software form a composite model of all of their faces, thereby allowing any or some of the same people to pass scan security? Most likely not, but it would be an interesting test.

What would happen is you would essentially have data from both faces on the phone. This would make it difficult for both faces to unlock the phone. Thats why both brothers couldn't unlock the phone on the first try. The phone is essentially looking for a face that is now different from both brothers because of the combined data.
 
Was there ever an equivalent case for Touch ID, i.e. where two different people were actually able to unlock one phone with a single fingerprint profile?
 
Like I said in another thread, the computational problems Apple is trying to solve with FaceID are insanely hard. In any solution to a complex problem, there will have to be a compromise between speed and accuracy. No doubt FaceID employs such a compromise, and its identifying of faces will be approximately correct rather than perfect. It will work for most people most of the time.

The question is whether failures are common enough to make the user experience frustrating. It seems like the feedback from people who have the phone is that FaceID works well enough. Now my worry is about OLED screen burn-in....
 
I don't disagree, although more users may try face ID who would not have used Touch ID, if only for the novelty since it's a banner feature of the phone.

Also, the fact that some choose to not use a security feature is not a reasonable argument against the failings of that feature.

iPhone 8 is what folks should get then. My wife’s fingers are not recognized by TouchID. She has to enter security code every time to unlock her phone. The only reason she has a lock code is iCloud. If it weren’t for iCloud, she wouldn’t have the lock code or TouchID. FaceID is a good security feature for her to eliminate having to unlock with a security code.
 
Last edited:
It shouldn't. After all, how many similar looking siblings work together at companies? And they didn't stop you from using Touch ID even though it can be hacked (admittedly, with great effort), right?

People freak out over new tech all the time. We saw it with Touch ID. When people realize that the chances of their doppelgänger hacking into their phone is almost zero, they'll calm down and accept the fact that facial recognition is about as secure as one could hope for in today's consumer tech.
I can see them disabling it for certain people (e.g. those who work with clients in the defense industry). I don’t know how they have handled facial recognition on the Note 8, which is easier to hack. However, that phone retained the fingerprint sensor.
 
Adaptive Recognition
Machine learning lets Face ID adapt to physical changes in your appearance over time -
apple.com
So, yes, it can understand that you've grown a beard and that might have changed the apparent proportion of your face, that's not quite the same as continuing to collect data about your core feature and face shape/ proportion though is it? That's not going to stop it recognising this guy's brother as him in other words.
 
This x1000. Apple clearly states it learns and improves as you use it. You can’t just enroll a face then give it to your twin (this is what CNN Money did in their video - they literally handed it straight to the twin after enrollment).

Won’t stop countless idiots from claiming it’s not secure, though.

Yes, I think this is where the attention should be... establishing if indeed FaceID does get better over time and with use.

I have a twin, though... so I'm screwed. :p
 
OK, who cares, nothing is 100%. Why is it that society must always try to make something fail or find fault? Why can't we try to find the positive in things in life and not usually always trying to find the negative.
WTF !!! I care, I paid $1000 o_O. If it was free I wouldn't care.
 
  • Like
Reactions: motulist
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.