Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iPhone X Face ID Again Unlocked With Mask, Even With 'Require Attention' Turned On

Z400Racer37 said:
I thought it had a 1,000,000 in one shot of fooling it..
Click to expand...

Never trust someone who quotes round numbers without tons of paperwork supporting it. It's called a bluff. I am sure Apple worked plenty on making this technology fairly secure, but unless you combine retinal, facial, fingerprint and DNA, it's going to be only that: fairly secure for most people not to bother ever trying to unlock it. What I find funny is how they "missed" the twin scenario which is obviously going to fail.

The good news for law enforcement is now that they can generate a criminal's face, render it 3D and unlock the phone without needing the person's passcode or chopped up finger. This, in my eyes, is a clear response to FBI and government requests of handing over data. Apple will not do that, nor will it compromise their encryption algorithms with back-door access, but created a front-door that allows someone diligent enough to unlock it, so everyone's happy. Apple (sort of) keeps its promise to consumers, law enforcement gets access (if they really want to).
 
  • Like
Reactions: simonmet
If someone were truly concerned about the security of their phone, they'd use a passcode only and never type it in an insecure location. If cameras can capture your face well enough to create a 3d mask, they can also capture the pattern of keys you type to unlock your phone. How many of us have unlocked our phones in plain view of a store's security cameras?
 
  • Like
Reactions: pmhparis, simonmet and Bryan Bowler
These types of things are publicity stunts. If someone is truly freaked out about this, they should take note that a 6-digit pin has a 1 in 1,000,000 level of security as well.
 
  • Like
Reactions: pmhparis
This all reminds me of the TouchID introduction a few years back.

Goes something like this:
With some here breathlessly waiving their hand in the back of the classroom while squirming in their seat, and saying, "Yeah, but but but, what if a criminal mugs you on the street, steals your iPhone, cuts off your thumb with a pocket knife, and then runs away with your iPhone and your severed thumb." THEN WHAT?

Yeah, that never happened, either.
 
  • Like
Reactions: pmhparis and J.J. Sefton
Liquid Galaxy said:
And in other news - when you put the same amount of effort in, Touch ID can also be bypassed...
Click to expand...
Yeah, but for less than $1000.
Thai said:
yeah, you’re right...iPhone 8+ has TouchID that can be bypassed with PLAYDOH in MINUTES vs. this FaceID “hack”...and iPhone 8 with the inferior camera, inferior display that cannot display HDR/DV to the fullest, and 3 year old design. You’re right dude...YOU SHOULD BE HAPPY.
Click to expand...
Wonder how long it will be until: "iPhone X with inferior camera, inferior display with stupid notch, fragile all-glass design, and IR security ...". YOU SHOULD BE HAPPY. Every whizz-bang golly-jee doodad today will be tomorrow's x year old, has-been design.
[doublepost=1511877456][/doublepost]
robertcoogan said:
Okay...I don't trust Face ID either. But a $200 "stone powder" mask? Who is going to go to that much trouble?
Click to expand...
Someone who wants access to all of your credit card and bank accounts, perhaps? It's not about stealing the phone so much as opening the door to your identity and associated finances.
 
simonmet said:
Here’s a somewhat sobering thought. CCTV technology is widespread and in certain cases more advanced than most people realise. Software algorithms that can detect people and track their movements already exist and are in active use.

What if this technology improved from using 2D images to adding the third dimension like Face ID? Well suddenly the technology can become a lot more accurate and a lot more powerful.

It’s possible governments already have these kinds of advanced 3D scanning techniques available and if they don’t they soon will, you can count on that!

These cameras could potentially record the information required to rebuild a model of your face or even whole body without you even realising it.
Click to expand...

I think this is a prescient assessment.
 
  • Like
Reactions: simonmet
Find an iPhone with Touch ID, find that persons fingers, take high res photos of finger, replicate print with 3D printer. Viola!!!
 
When someone shows this working when a team has been given some photos of the target and built a mask off that I will be impressed. Currently they have managed to unlock the iPhone using a mask of a guy who will have been there the whole time and they probably 3d scanned his face.

Oh and if their mask didn't work they just tweaked it and tested it again. How would that work in the real world. Masks 1-5 fail and now we are back to a 6 digit passcode.
 
  • Like
Reactions: Michael Scrip and pmhparis
So much work to prove that twins can unlock each other devices !?
Even Apple warned to avoid using Face ID with your "evil twin"!
 
It seems to me that the obvious next step in this scenario would be for Apple to implement verification of human-like facial movements prior to unlocking. Watch for movement, and if the "face" behaves like... well... a fixed immobile mask, then fail the unlock attempt.

But naturally, in the standard arms-race fashion, that'll just be one more challenge for these "security" companies to spend all of their time and money exploring... which gives Apple another set of data points with which to improve their product, which gives the "security" companies more to explore, which gives Apple... yeah; you get the idea. And then next year, Apple inevitably releases an entire series of FaceID iPhones which have had nearly all of the kinks worked out, largely at the expense of companies who have been furiously trying to discredit Apple. Apple wins in the long run -- and so do their customers.

(Not that any of this matters in the least to the average consumer, of course.)
 
Why are they still doing these kind of tests? If someone makes a flippin perfect mask of my face because they want to get into my phone I will help them look through everything I have on my phone. I mean seriously people who on earth would go through this kind of trouble to unlock an iPhone. It’s ludacris.
 
Easy solution for Apple, make the face registration more strict. Make sure that the face does a full rotation so that TrueDepth can see all angles of face.

This hacker basically scanned his forehead and thus had to be realllllll careful in placing the phone in the exact location to scan just the upper face.
 
This repeat of basically the same “test” by the same people is clearly about garnering YouTube views above all. And Macrumors is just riding the wave of traffic.
 
When will people understand that Face ID is a convenience thing and not a security thing? Apple has never claimed it to be infallible. It’s the same with Touch ID.

These features are here to encourage passcode use. Take my father for example. He hates using a passcode to access his iPad, so he turned it off. When Touch ID came to iPad he finally started using passcode because he rarely needed to enter it and his device is far more protected than before.

If you need total protection just stick to using a strong passcode and set your device to wipe after a few tries.
 
Give it a rest already. In reality no one will go though the trouble of creating ones face just to unlock ones phone. Get real. (Except of you Work for the fbi)
 
If someone goes through with all that effort to make a mask of my face, then they deserve to see my nudes. That’s dedication!
 
CalMin said:
When will people understand that Face ID is a convenience thing and not a security thing? Apple has never claimed it to be infallible. It’s the same with Touch ID.

These features are here to encourage passcode use. Take my father for example. He hates using a passcode to access his iPad, so he turned it off. When Touch ID came to iPad he finally started using passcode because he rarely needed to enter it and his device is far more protected than before.

If you need total protection just stick to using a strong passcode and set your device to wipe after a few tries.
Click to expand...

I say it’s a security thing when it comes to purchases, locking ones phone and accessing banking/passcode information. If it was about convinces, one would disable Face ID and the passcode
 
Once they get in they can read the imessages to my wife, see photos of my cats and even call my mum... Well worth the effort.
 
sniffies said:
Even if Face ID is able to be unlocked with a mask of Jabba the Hutt and Chewbacca, I’m still not downgrading back to the ugly and outdated iPhone 8

Hell no
Click to expand...
haha me niether! Fingerprint scanners in phones is like wanting a cassette player in your car again!
 
So maybe it's good enough security for most, but the fact remains it's an "innovation" that's actually less effective than the feature it's replacing, and yet Apple's charging more for it. Are the features worth the price over the 8 (or heck - even over the 6S, which is still available)? With tech, the answer to that question really should almost always and entirely be objectively clear. Over the last several years with iPhone, however, it's been largely subjective, due primarily to step releases incorporating mostly style or minor usability features (e.g., "full" screen, 3d touch, live photo) with little or no real utility.

Apple will continue on this path because people keep buying the devices (particularly with the upgrade program providing a steady stream of recurring revenue), but most of us with common sense know the ability to animate a poop emoji or sing karaoke with a cartoon unicorn avatar isn't worth $1200, and janky facial recognition, outdated wireless charging, a notched "full screen" and slightly improved photo features aren't going to tip the scale. The 8, 7 and 6S might be "uglier" and "slower," but compared to them, the X is essentially an overpriced toy.
 
this is only get media attention, for average person, who cares to hack your phone? before touch id, I never had passcode on my phone
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back