Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
There are times with my iPhone X that it misses my face, fails, brings up the keyboard for a passcode, then rapidly fails several more times as it catches glimpses of my face. I'm confident in saying that people generally aren't careful enough to successfully get into this phone within 48 hours using this "casual for anyone" method; they're likely to accidentally trigger several failed Face ID attempts in retrieving, transporting, and examining the device.

That said, Apple could just reduce the 48 hour passcode fallback to 12, which would rule out everyone except Ethan Hunt.

I've been thoroughly enjoying iPhone X. I'm incredibly impressed with Face ID. Not having to clean the Touch ID sensor to get in is quite nice. The only struggle: unlocking the phone in the early morning; it's hard to stare into a screen when you've just woken up.
 
  • Like
Reactions: pmhparis
I wonder if this would work well enough to never get a “try again” from Face ID. You only get a few and then the phone is protected by a passcode again. If it does work this well, then by some accounts it’s better at opening an iPhone than an actual Face!
 
Thing is Apple set themselves up to fail over this. By saying 1:1,000,000 people are going to go out of their way to prove them wrong.

And why 1:1,000,000? Why not 1:1,254,892 or 1:996,895? By rounding up (or down) to the nearest million they are trivialising the term "million". For all we know they may simply round the figure-up from 1:500,001 as that's closer to 1 million than not.
 
It’s a technically interesting exercise but requires such a level of access to detailed photographs that it’s a non-issue.

My house has doors and windows that could be broken with no technical skills. They all do. I’m not going to be moving house.

I’m not going to be ditching my X or deactivating Face ID.

The house thing is a great example.
 
TouchId and FaceId are meant to replace 4 digit unlock codes, not 16 characters passphrases. This way users can use a long, secure passphrase without the hassle of having to enter it every time to unlock the phone, but for some actions the more secure passphrase is still required.
 
To be fair, it sounds like these guys enjoyed an unfettered access to the phone and probably had hundreds of failures before this one mask worked. Correct me if I'm wrong, but won't the X disable Face ID after 6 odd failures (not got an X myself but I assumed it was the same logic as TouchID)?

Yes, you’re right. And those failures don’t last long considering when the thief picks up the phone it’ll scan his face and there will then only be 5 remaining failures allowed.
 
Quite obviously FaceId can be unlocked with a mask - if you set it up using a mask, instead of using your face. And that's essentially what these guys are doing. In real life, it would be quite difficult to create a 3D mask without knowledge and permission of the user. No chance to unlock the phone unless the owner of the phone unlocks it for you whenever the unlocking fails.
No, in the video, they set up faceid with the presenter's face and then unlocked it with a mask of his face. Not taking anything away from the difficulty of doing this for a complete stranger, but it showed that it can be done.

Guess some random check for any kind of infra-red on the face could fix this or is the camera sensitive enough to pick up facial movement?
 
Find some iPhone X in a parking lot. Make a mask? Whose face do you start with? But one thing is for sure OF COURSE YOU CAN FOOL THIS!! gees. It's a convenience security feature, but mind you there is some security.

Found a dead mass-shooter’s body. Discovered there’s an iPhone X inside his/her pocket. Create mask. Carefully take out iPhone X from body (and don’t let it see any faces in the process). Unlock iPhone X, warrant not required, Apple not need to be contacted.
 
I see this being useful for law enforcement.
People are photographed as part of the arrest process.
So it would be pretty easy to obtain all the facial data needed to access an iPhone X.
No need to compel a person to use their fingerprint to unlock the phone.
Snap a few pics and break out the 3D printer.

Or just use a similar 3D camera for taking photographs meant for national IDs. Keep the mask on-file until it’s needed.

Similar thing for Touch ID as well.
 
The thing that iPhone X owners can take away is, you needn't worry. It's like when Touch ID was compromised with the rubber/silicone fake prints.

Has mentioned, if the mask has not been perfectly made to match the stored face, it will kick you back to entering the passcode after five failed attempts, so it's not like iOS gives you infinite tries.

Either way, it's a lot more secure than Samsung's Iris Scanning unlocking.
 
And yet...

The iPhone X can scan your face and build a 3D digital model for Portrait Lighting effects in a fraction of a second. It can even map expressions for Animoji in real-time.

I'm playing devil's advocate here, just passing time while I wait for my 256 GB iPhone X shipping status to change from "Your package is in transit" to something that actually means something to me (and maybe a delivery date).

What if all you need to make an accurate 3D model in 2018 is a handheld device with an OLED screen and a notch containing a high resolution camera and a unit that floods your face with tens of thousands of infrared dots that are not visible to human eyes? Don't say it's impossible, because we know that's not true.

Not saying it’s impossible, but even the iPhone Xs’ Face ID set up requires multiple shots of your entire face. its possible but would require a lot of work, equipment and cooperation, I doubt you get that
 
  • Like
Reactions: pmhparis
Yeah Apple didn’t have failures or half assed products during Steve Jobs era.

No they made a plenty of mistakes. At least the CEO was humble enough to publicly make apologies for it!

PowerMac G4 Cube - Acrylic folly
Apple coding environment changes prior to OSX intro (attended during WWDC stood up; jobs stated that the person was right!)
Promise of 3Ghz G5 in 1yr - public apology even at the hopes of wanting it in a PowerBook.
- note this led the change to Intel! Apple did something to never let that occur again. Empty promises. Transition to Intel CPU under the promised 12mth deadline with 3mths to spare.

Then you saw th souring of Apple when Jobs told us you’re holding it wrong with iPhone 4!
Blaming attendees to get off Apples free WiFi vs using the core components of WoFi: Mac filtering and 5ghz band isolation to their presentable products. Limit bandwidth to the public nodes. Change channels.

When has Tim Cook made an apology?! Has there been a need? Hmmm, that’s a debate.

But that’s the real difference ... not that they never made mistakes but they apologized and did better for their users but that all changed.
 
  • Like
Reactions: WatchFromAfar
Oh no, I'm scared someone might invest a lot of time making a face mask that looks like mine so they can hack into my boring family photo album :(
 
  • Like
Reactions: pmhparis
Seriously, the more we keep writing about Face ID failing in crazy-specific, well-funded, obviously targeted instances, the more people are going to think that they should care. What sense does it really make to keep reporting every time somebody successfully "fools" Face ID after weeks of trying?

My $0.02, while I've got your ear: Face ID works amazingly well in my experience.
Criminals beware...
 
I can also be lucky and randomly guess your PIN-code to unlock your phone also. Be it 4 digits, 6 digits, or more. IT IS POSSIBLE!
 
This is first stage of using a FaceID. Apple will collect information via analytics from your iPhone, this means FaceID will get improvement for the hardware & software in the future update.

Good thing that Passcode is still active & primary method for unlocking.

I'm not worry about that since I'm not celebrity or important person in the world :D
 
If there is someone on the bus next to you holding unwieldy and ungainly paper maché mask and pointing it at an iPhone X, chances are, it's nicked! The signs are there...
 
apple ID should have Facial passcode. like a certain mimic combination that person would know and Iris scan to be sure. I'm still waiting for a video that somebody will unlock an Iphone with dead mans head. (Y) gore
 
Where there's a will there's a way. Any security feature can be overcome it is only a matter of resources allocated, time and practicality. They say Touch ID is more secure... but even that is not infallible. With a budget of zero and a few seconds one could bludgeon someone in their head and chop a finger off and voila Touch ID fail. Sounds a lot easier than luring someone into a room with hidden array of cameras and then making a near perfect face mask to override face ID.
 
Found a dead mass-shooter’s body. Discovered there’s an iPhone X inside his/her pocket. Create mask. Carefully take out iPhone X from body (and don’t let it see any faces in the process). Unlock iPhone X, warrant not required, Apple not need to be contacted.

Just saying: You still don't have the passcode, and FaceId stops working after some time (I think 48 hours). Yes, it helps in some cases. It doesn't help thieves, because without the passcode they can't reset the phone, and they can't use it for more than 48 hours.

And technically, they still need a warrant against the criminal, but that should be no problem. And of course they absolutely should contact Apple, because Apple will help them to get the most out of a phone that is unlocked with FaceID but without a passcode.
 
  • Like
Reactions: pmhparis
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.