Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Facial Recognition Feature on Galaxy S8 Bypassed Using Just a Photo
- Thread starter MacRumors
- Start date
- Sort by reaction score
That the whole concept is wrong. Fingerprints should only be used for identification, NOT for authentication.
Did anyone watch the video and notice that it is a display phone? Could it possibly be running in display mode?
Last edited:
When was it bypassed by a nipple? Link please.
Simple , don't use it.
[doublepost=1491050121][/doublepost]
Agreed . They are not going to let people have full access to these phones and allow users to lock the devices . I suspect it Might open to most faces
[doublepost=1491050121][/doublepost]
Agreed . They are not going to let people have full access to these phones and allow users to lock the devices . I suspect it Might open to most faces
This was what I was surprised with too. But then I was also surprised that TouchID was bypassed in a couple of days too.
[doublepost=1491050394][/doublepost]
Ok, this is valid.
Don't forget? It was setup with a nipple and the nipple was used to unlock it, not bypass it. Don't forget.
I have to say I love using my fingerprint. The phone is already in my hand and at my fingertips.
I don't think I would even use another form of security at this point. And the iPhones fingerprint scanner is pretty damn accurate.
I don't think I would even use another form of security at this point. And the iPhones fingerprint scanner is pretty damn accurate.
This isn't surprising. This is Samsung after all. What a complete joke. If they knew it wasn't secure, they shouldn't have added it. But they did because it was "cool." Sad.
Not sure how it works on the S8, and these kinds of videos can be sketchy.
I know that Windows Hello recreates a "3D" topo map of the face which is why it requires two cameras (one of which I believe is an IR camera). So it cannot be fooled with pictures. I would have hoped that Samsung would have done something similar since that's already widely used.
But if you do care about security, and not being coerced into opening your device with your face/body: stick with a decent password. More inconvenient, sure -- but that's the tradeoff.
I know that Windows Hello recreates a "3D" topo map of the face which is why it requires two cameras (one of which I believe is an IR camera). So it cannot be fooled with pictures. I would have hoped that Samsung would have done something similar since that's already widely used.
But if you do care about security, and not being coerced into opening your device with your face/body: stick with a decent password. More inconvenient, sure -- but that's the tradeoff.
Would you say it's easier to take a photo of someones face and use it from a phone, or go through the 'entire' process that the person in the link did?
Was thinking the same thing - that's the Samsung ingenuity we've come to love over the past 12 months.
Yes but that's quite a few hoops to jump through though to make a fake finger print. The S8 you just take a picture of someone's face.
What escaped me is that face unlock is nothing new on Android. So I guess this is just the standard implementation which was never meant to be 100% secure, just more of an extra option for convenience. I thought it was a new Samsung implementation, unless it is.
Not knocking Samsung here. I have an S7 Edge as spare that I sometimes wish is my daily phone.
Here
The same situation as the S8 it was first setup with a face and then unlocked with the same face.
It's a common trend for Samsung to do cursory work, so for me at least, it was expected.
Samsung is a company that just doesn't take its time with things. From the security of their devices, safety, to even the alignment of the holes on the bottom of the device.
Everything I read today will be considered as April 1st BS.
If it's not true Macrumors will be getting sued.
It was setup with a real face then unlocked with a picture of a face.
Total time to bypass/hack: 5 seconds.
How easy/how long would it take to spoof a real touch-id fingerprint? Hours with all the right equipment assuming you stole a copy of their fingerprint.
TBH, Touch ID has worked very well for me, and it's gotten faster and more reliable since it first appeared. I like the way it lets me unlock my iPhone without looking directly at it.
I'm not against adding biometric identification methods as long as they're at least as secure as fingerprint scanning. It also might be interesting to let users optionally require more than one to unlock certain apps like password managers.
I'm not against adding biometric identification methods as long as they're at least as secure as fingerprint scanning. It also might be interesting to let users optionally require more than one to unlock certain apps like password managers.
Then I would stand corrected on this subject. Let's see