Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I do think the way the guy had to perfectly position the phone was a bit odd and telling. All of this seems to be a bit blown out of proportion to me.
 
  • Like
Reactions: Ankaa
Should be if law enforcement ever needs into it. The FBI would totally manufacture masks based off of your face.

Maybe he's not a criminal and has nothing to worry about.
[doublepost=1511837651][/doublepost]
Many apologies. I hear Windows phone is da bomb!
[doublepost=1511836901][/doublepost]

And FBI can’t with fingerprints and playdoh?

No doubt the FBI is after everyone here.
 
  • Like
Reactions: pmhparis
“" but it's worth noting that fooling Face ID in this way requires a 3D printer, several hundred dollars worth of materials, physical access to a person's iPhone X, and detailed facial photographs that can be used to reconstruct a person's face.”

If someone wants to go through all of this just to get into my phone. I would be so flattered I would just hand it to them unlocked.

We may see police "law enforcement" making some masks when they have the person's likeness already. And they are not able to simply hold the phone in front of said prisoner's face (!).
 
And I hope that the public isn't foolish enough to believe that they should be concerned about the security of their phone because of Face ID. Maybe if you were a spy or a high ranking official there might be a tiny bit of thought given to this. To the tens of millions of X users, there is nothing to lose sleep over. You're not important enough for someone to go through all of the effort to access your phone.

I don't have the keys to Fort Knox I get it...I never intended to come off as someone important enough for anyone to care about stealing my private information. I think this is where you misunderstand that I'm merely pointing out that FaceID is not as secure as TouchID. It's harder to replicate someone's fingerprint unless you are really hellbent on getting their fingerprint for purposes of stealing their identity, in which case, millions of X users should care about. If they have Apple Pay set up, Keychain turned on to use for passwords and credit cards, etc (for example). If you don't think that's information that anyone should worry about someone stealing then you have more confidence in FaceID than some people. I happen to care a lot about security and privacy, and all these recent videos that are coming out, doesn't give me 100% confidence that my information is more secure than before.
 
As described in an accompanying blog post, Bkav used a 3D printed mask made of stone powder, which cost approximately $200 to produce. 2D infrared images of eyes were then taped over the mask to emulate real eyes.
Bkav claims the materials and tools used to create the mask are "casual for anyone" and that Face ID is "not secure enough to be used in business transactions," but it's worth noting that fooling Face ID in this way requires a 3D printer, several hundred dollars worth of materials, physical access to a person's iPhone X, and detailed facial photographs that can be used to reconstruct a person's face. Even then, if the 3D printed mask and the design of the infrared eyes aren't perfect, Face ID will fail after five attempts.

So what is it $200 or several hundred? $200, maybe worried a little, several hundred, not so much.

Also any method of accurate biometric recognition is safer than using card which can be duped or stolen.

These guys are marking it seem like Face ID is a terrible thing while realistically they probably spent hours of research and building time, multiple failed attempts to which at that point Face ID would be disabled due to time limit, plus you’d need a really accurate picture of someone’s face and even if it’s a celebs face probably hard to get a perfect replica mask model on the first try.

I’m not worried at all, these guys are just looking for publicity, plus unlike Touch ID, Face ID can improve with software updates so it can only get more secure.
 
I don't have the keys to Fort Knox I get it...I never intended to come off as someone important enough for anyone to care about stealing my private information. I think this is where you misunderstand that I'm merely pointing out that FaceID is not as secure as TouchID. It's harder to replicate someone's fingerprint unless you are really hellbent on getting their fingerprint for purposes of stealing their identity, in which case, millions of X users should care about. If they have Apple Pay set up, Keychain turned on to use for passwords and credit cards, etc (for example). If you don't think that's information that anyone should worry about someone stealing then you have more confidence in FaceID than some people. I happen to care a lot about security and privacy, and all these recent videos that are coming out, doesn't give me 100% confidence that my information is more secure than before.

You realize that people can lift your prints from anywhere you’ve been. And now they can just take a decent picture of your finger...use your kids PLAYDOH and voila!! Your TouchID is open doors!

Again, it is far EASIER and CHEAPER to break into TouchID.
 
  • Like
Reactions: Baymowe335
You realize that people can lift your prints from anywhere you’ve been. And now they can just take a decent picture of your finger...use your kids PLAYDOH and voila!! Your TouchID is open doors!

Again, it is far EASIER and CHEAPER to break into TouchID.

I stand corrected.
 
So someone steals your phone. Then they have 48 hours to create an exact replica of your face, eyes and all. Then have two chances to get it unlocked.

Even in the video he has to concentrate very hard on we’re he puts the phone for it to unlock. I’d like to know how many chances he had to get it right
 
You realize that people can lift your prints from anywhere you’ve been. And now they can just take a decent picture of your finger...use your kids PLAYDOH and voila!! Your TouchID is open doors!

Again, it is far EASIER and CHEAPER to break into TouchID.

And you're more likely to get struck by lightning than having that happen.
 
  • Like
Reactions: pmhparis
I don't have the keys to Fort Knox I get it...I never intended to come off as someone important enough for anyone to care about stealing my private information. I think this is where you misunderstand that I'm merely pointing out that FaceID is not as secure as TouchID. It's harder to replicate someone's fingerprint unless you are really hellbent on getting their fingerprint for purposes of stealing their identity, in which case, millions of X users should care about. If they have Apple Pay set up, Keychain turned on to use for passwords and credit cards, etc (for example). If you don't think that's information that anyone should worry about someone stealing then you have more confidence in FaceID than some people. I happen to care a lot about security and privacy, and all these recent videos that are coming out, doesn't give me 100% confidence that my information is more secure than before.

It would take alot of work and money to do and I doubt that anyone can even make an acurate enough mask first try from some picture and not a 3D modeling camera, and Face ID will probably disable before they can get in. Plus Touch ID is hardware, can only improve with hardware, Face ID is mostly software and can and probably will improve with software updates

I honestly don’t think you or anyone has anything to worry about now and especially in the future
 
So someone steals your phone. Then they have 48 hours to create an exact replica of your face, eyes and all. Then have two chances to get it unlocked.

Even in the video he has to concentrate very hard on we’re he puts the phone for it to unlock. I’d like to know how many chances he had to get it right

I thought it was 8 hours before the phone defaulted to the passcode?
 
This is an interesting issue. We all pass by multiple locations where a 3D scan of our face could be made. Imagine when you looking up at the menu at a fast food place, or looking up to read the room number of a door. A generic (i.e. not with Apple proprietary face technology, but with industry standard 3D mapping technology) 3D scan is made of your face and picture of your face taken. Feed this generic data into a 3D printer to make mask. Combine mask with eye image, and there you go.
It is interesting. I think the real test would be to demonstrate unlocking a phone belonging to someone who was NOT cooperating with the effort. The subject should be aware of the test and consent, but should not pose for any scans. The mask data must be recorded in the ways you describe...with hidden cameras and he like.
 
  • Like
Reactions: pmhparis
It would take alot of work and money to do and I doubt that anyone can even make an acurate enough mask first try from some picture and not a 3D modeling camera, and Face ID will probably disable before they can get in. Plus Touch ID is hardware, can only improve with hardware, Face ID is mostly software and can and probably will improve with software updates

I honestly don’t think you or anyone has anything to worry about now and especially in the future

I suppose you are right considering Apple is always looking to beef up the security of their iOS. I hope I never have to read someone's identity being stolen due to a failed FaceID. I know the feeling of being victimized by identity theft. It's the worst thing to go through just to prove you are who you say you are.
 
  • Like
Reactions: pmhparis
It is interesting. I think the real test would be to demonstrate unlocking a phone belonging to someone who was NOT cooperating with the effort. The subject should be aware of the test and consent, but should not pose for any scans. The mask data must be recorded in the ways you describe...with hidden cameras and he like.

I doubt you could even make an acurate enough 3D mask with just pictures. I do 3D printing and to make and acurate 3D model of something without a 3D scanner is difficult as hell, you need to take like over 100 picture from 100 angles and I doubt you would be able to get enough point to match with that method and i can honestly say I’ve never made an acurate 3D model of anything with this method, no matter how many pictures I take, and in a controlled environment. Even with a 3D scanner you would need complete cooperation and a long time to get a good model.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.