Galaxy S10 Face ID Security issues. Video unlocks smartphone

stylinexpat

macrumors 68020
Original poster
Mar 6, 2009
2,025
2,551
Way too easy to unlock..

Your girlfriend or wife would most likely have quite a few videos of you. Once you sleep your video could be used to unlock your smartphone. Best to stick with manual passwords that you have to type in for security.

 

The Game 161

macrumors Core
Dec 15, 2010
19,685
9,676
UK
Facial recognition was never suppose to be secure

Fingerprint is

And what's with the whole girlfriend can unlock your phone when your asleep?

If that even happens then you shouldn't be together

My partner has registered her fingerprint on my phone like I have on hers incase of some emergency when it's needed

She can go through mine like I can with hers as we have nothing to hide. End of
 

1050792

macrumors Demi-God
Oct 2, 2016
2,545
3,933
That's the price you have to pay for Facial Recognition.
The iPhone's Face ID can be fooled as well in case you missed it.

Your wife can also use your finger to unlock your iPhone while you sleep.
 
  • Like
Reactions: jamezr

MandiMac

macrumors 6502a
Feb 25, 2012
670
319
The iPhone's Face ID can be fooled as well in case you missed it.
Care to elaborate? Best I can remember is that even Hollywood mask creators had a pretty hard time fooling Face ID, and that was after several DAYS of work. You sure Face ID can be fooled like the S10?
 

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
Care to elaborate? Best I can remember is that even Hollywood mask creators had a pretty hard time fooling Face ID, and that was after several DAYS of work. You sure Face ID can be fooled like the S10?
Just google it...FaceID has been fooled soooo many times.....stop drinking the Kool-Aid....


https://www.macrumors.com/2017/11/04/face-id-brothers-video/


https://www.forbes.com/sites/thomasbrewster/2017/11/27/apple-face-id-artificial-intelligence-twin-mask-attacks-iphone-x/#67e3e2032775
 

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
Its still the best in its class tho,by far..
I agree that it is the a great facial unlocking. But it is not better than fingerprints or a passcode.

But FaceID introduces a new problem that TouchID has never had: Your face sits out in the open, displayed in public, and well-documented across social media platforms. Using it as a secret key is a little like writing your PIN on a Post-It note, slapping it on your forehead, and going for a stroll. Even photos on Instagram and Facebook might be enough to compromise your control of your face as a login mechanism. Researchers at the University of North Carolina last year showed that they could use Facebook photos alone to reconstruct a 3-D virtual model of someone's face that could defeat five different facial-recognition applications they tested it against, with between 55 and 85 percent success rates.
https://www.wired.com/story/iphone-x-faceid-security/
 

MandiMac

macrumors 6502a
Feb 25, 2012
670
319
You should stop riding the hate train. You‘d really think you could muster up a twin of mine or get that mask done without me noticing? Good luck with that! :)
[doublepost=1552397195][/doublepost]
I agree that it is the a great facial unlocking. But it is not better than fingerprints or a passcode.



https://www.wired.com/story/iphone-x-faceid-security/
Did you even read the Wired story?

here you go: https://www.wired.com/story/tried-to-beat-face-id-and-failed-so-far/

Quotes: "In mid-October, we began the process of stealing the face of our would-be victim, WIRED senior writer and longtime iPhone reviewer David Pierce."
"...Caragan put Pierce in a smock, and then smeared the front half of his head with lifecasting Smooth-on Silk-brand silicone, all the way up to the middle of his scalp."
"Over the next days, Caragan filled Pierce's cast with clay, and carefully sculpted the face to open its eyes and fix some infinitesimal feature droop from the weight of the silicone."
"One by one, we tried each mask. One by one, the iPhone dismissed them without hesitation. In the worst cases, it failed to even acknowledge on the first try or two that a face was even present, not to mention the correct face."
"After nearly six hours of trial and error—mostly error—we gave up."
 
Last edited:
  • Like
Reactions: ultravegeta1981

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
I do like a fingerprint better but i didnt know i would like face id this much. It rarely mis my face and is very convenient. I guess it will be safer and harder to fool in further iterations.
personally I really like it on my Xs Max. I wish it would unlock and go straight to the home screen.
It is great to use especially in cold weather when you have gloves on :)
 

MandiMac

macrumors 6502a
Feb 25, 2012
670
319
personally I really like it on my Xs Max. I wish it would unlock and go straight to the home screen.
It is great to use especially in cold weather when you have gloves on :)
But how would you look at your notifications if it would take you straight to the homescreen?
 

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
You should stop riding the hate train. You‘d really think you could muster up a twin of mine or get that mask done without me noticing? Good luck with that! :)
[doublepost=1552397195][/doublepost]
Did you even read the Wired story?

here you go: https://www.wired.com/story/tried-to-beat-face-id-and-failed-so-far/

Quotes: "In mid-October, we began the process of stealing the face of our would-be victim, WIRED senior writer and longtime iPhone reviewer David Pierce."
"...Caragan put Pierce in a smock, and then smeared the front half of his head with lifecasting Smooth-on Silk-brand silicone, all the way up to the middle of his scalp."
"Over the next days, Caragan filled Pierce's cast with clay, and carefully sculpted the face to open its eyes and fix some infinitesimal feature droop from the weight of the silicone."
"One by one, we tried each mask. One by one, the iPhone dismissed them without hesitation. In the worst cases, it failed to even acknowledge on the first try or two that a face was even present, not to mention the correct face."
"After nearly six hours of trial and error—mostly error—we gave up."
Like I said...stop drinking the kool-aid and do a Google search......
You can lead a horse...but you can't make them drink.....




Then there are agencies out there that scan your face everywhere you go. They have the software and technical ability to unlock your phone anytime they want using the digital images they gather from everywhere from live public scanning to social media.


Then there are laws against being forced to enter your pass code for any law enforcement to access your phone.
But not for facial recognition......

But FaceID introduces a new problem that TouchID has never had: Your face sits out in the open, displayed in public, and well-documented across social media platforms. Using it as a secret key is a little like writing your PIN on a Post-It note, slapping it on your forehead, and going for a stroll. Even photos on Instagram and Facebook might be enough to compromise your control of your face as a login mechanism. Researchers at the University of North Carolina last year showed that they could use Facebook photos alone to reconstruct a 3-D virtual model of someone's face that could defeat five different facial-recognition applications they tested it against, with between 55 and 85 percent success rates.
https://www.wired.com/story/iphone-x-faceid-security/
[doublepost=1552399934][/doublepost]
But how would you look at your notifications if it would take you straight to the homescreen?
I can just open the app :) The notifications still exist....
 

MandiMac

macrumors 6502a
Feb 25, 2012
670
319
Then there are agencies out there that scan your face everywhere you go. They have the software and technical ability to unlock your phone anytime they want using the digital images they gather from everywhere from live public scanning to social media.
Okay, this one takes the cake for me. Did you even bother to read the Wired link I posted earlier? The same Wired outlet you got your link from? Don't forget the tinfoil hat :)

Edit to save us both some time: Photos (even from agencies) work against the Android implementation of a face scan, but not against Face ID. Wired and many others tried and failed.
 

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
Okay, this one takes the cake for me. Did you even bother to read the Wired link I posted earlier? The same Wired outlet you got your link from? Don't forget the tinfoil hat :)
oh....so you prefer to your head in the sand?
Did anyone believe the NSA had the ability to do all the things that came out after the Snowden leaks 3 years ago?
Their ability to do even more as expanded exponentially...technology in this space is booming.
 
  • Like
Reactions: decafjava

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
No, I prefer to read and understand. Please read for yourself: https://www.wired.com/story/tried-to-beat-face-id-and-failed-so-far/

And if you can provide me with a link that actually spoofs Face ID without using relatives younger than 14 (because that's a weakness Apple even stated in their keynote), I'd be glad to learn something new. :)
I have showed you examples of FaceID being fooled. Even if Apple disclosed something is a weakness....that doesn't mean it is not a weakness :rolleyes:. But I don agree that FaceID is currently better than facial recognition on Android so far :)

Then your ok with children unlocking their parents phone and buying anything they want well...because Apple disclosed it already? That is a huge security compromise just that alone

Since you prefer to read...maybe you will learn?
This from the article YOU linked above

https://www.wired.com/story/tried-to-beat-face-id-and-failed-so-far/
Rogers says he's still optimistic that he—or at least someone—will soon be able to spoof Apple's facial recognition. He bases that optimism in part on conversations he's had with Apple engineers, which he says give him reason to believe he'll succeed, though he declines to say more. "I’m still 90 percent sure we can fool this," Rogers says.



But FaceID introduces a new problem that TouchID has never had: Your face sits out in the open, displayed in public, and well-documented across social media platforms. Using it as a secret key is a little like writing your PIN on a Post-It note, slapping it on your forehead, and going for a stroll. Even photos on Instagram and Facebook might be enough to compromise your control of your face as a login mechanism. Researchers at the University of North Carolina last year showed that they could use Facebook photos alone to reconstruct a 3-D virtual model of someone's face that could defeat five different facial-recognition applications they tested it against, with between 55 and 85 percent success rates
https://www.wired.com/story/iphone-x-faceid-security/


Then read the articles that came out after the one you linked from Wired...


https://www.wired.com/story/10-year-old-face-id-unlocks-mothers-iphone-x/

Malik and Sherwani's son isn't the only unexpected relative who's been able to unlock an iPhone X. So have non-identical siblings, including this pair of brothers, and another pair of British half-brothers with a significant age gap between them, shown below.
 

MandiMac

macrumors 6502a
Feb 25, 2012
670
319
I have showed you examples of FaceID being fooled. Even if Apple disclosed something is a weakness....that doesn't mean it is not a weakness :rolleyes:. But I don agree that FaceID is currently better than facial recognition on Android so far :)

Then your ok with children unlocking their parents phone and buying anything they want well...because Apple disclosed it already? That is a huge security compromise just that alone.
Dear jamezr, all you've shown me so far are videos of young relatives. Security also means that my data is secure when you get my phone. So if you're an attacker, is it more likely that you get my fingerprint, my face (in a photo), my face (in a 3D model) or my child? As you love links so much, here you get two more:
December 18: https://www.idownloadblog.com/2018/12/17/fake-3d-printed-head-unlocks-android/
January 19: https://findbiometrics.com/black-hat-asia-face-id-spoof-talk-cancelled-601045/
All in all I'm a bit confused - you're loving using it on your Xs Max, but you're trash-talking it in the same thread. Face ID is not only better than the android face photographs, it's another tech completely. Remember that OP wanted to share the informatino about the Samsung S10 being fooled by a video, and us both took that completely off topic. Sorry to OP for that!
 

jamezr

macrumors G5
Aug 7, 2011
12,680
10,216
US
Dear jamezr, all you've shown me so far are videos of young relatives. Security also means that my data is secure when you get my phone. So if you're an attacker, is it more likely that you get my fingerprint, my face (in a photo), my face (in a 3D model) or my child? As you love links so much, here you get two more:
December 18: https://www.idownloadblog.com/2018/12/17/fake-3d-printed-head-unlocks-android/
January 19: https://findbiometrics.com/black-hat-asia-face-id-spoof-talk-cancelled-601045/
All in all I'm a bit confused - you're loving using it on your Xs Max, but you're trash-talking it in the same thread. Face ID is not only better than the android face photographs, it's another tech completely. Remember that OP wanted to share the informatino about the Samsung S10 being fooled by a video, and us both took that completely off topic. Sorry to OP for that!
Can you show me where I trash-talked my Xs Max?
I can differentiate between loving my Xs Max and not being afraid to admit it has flaws.....
I also love my Pixel 3 XL and S10+ and can admit they have flaws as well.
I have admitted the facial recognition software on Android can be fooled and FID is better. Doesn't make me like my S10+ or P3 XL any less :eek:. Admitting one of my phones has flaws doesn't mean I am trash talking that phone :D

I have showed you how FID can bee fooled. I have showed you where facial recognition authentication is flawed and opens the door to a whole plethora of risk.

I am done with this back and forth. Hope you have a great day :)
 

I7guy

macrumors Core
Nov 30, 2013
20,832
8,549
Gotta be in it to win it
That's the price you have to pay for Facial Recognition.
The iPhone's Face ID can be fooled as well in case you missed it.

Your wife can also use your finger to unlock your iPhone while you sleep.
You can’t unlock an iPhone with a video. And it’s true if someone hijacks your fingerprint it can be used to unlock your phone...no matter who manufactured the phone.
 

I7guy

macrumors Core
Nov 30, 2013
20,832
8,549
Gotta be in it to win it
Facial recognition was never suppose to be secure

Fingerprint is

And what's with the whole girlfriend can unlock your phone when your asleep?

If that even happens then you shouldn't be together

My partner has registered her fingerprint on my phone like I have on hers incase of some emergency when it's needed

She can go through mine like I can with hers as we have nothing to hide. End of
If you are in a household where you kids can hijack your fingers or are the one in a million where your twin can unlock the phone you are the exception and not the rule and You mitigate accordingly.