iPhone X Face ID Again Unlocked With Mask, Even With 'Require Attention' Turned On

[citysnaps]

Should be if law enforcement ever needs into it. The FBI would totally manufacture masks based off of your face.

I sure hope so. And have no problem with that. Provided...probable cause of a crime being committed has been articulated in a search warrant application specifying, the kind of information sought, which is then signed by a judge. The same as the FBI wanting to search your home, car, safe deposit box, workplace, etc looking for evidence to support a prosecution for a crime you are being accused of.

Without a search warrant the search would be illegal and any evidence collected would be inadmissible in a criminal trial. And I have no problem with that, either.

 

[koruki]

"not secure enough to be used in business transactions" but a little scribble of the pen on some paper is.. lol okay

 

[myscrnnm]

That mask looks like it's straight out of Mission: Impossible. If someone is going to all that trouble just to break into my phone, I probably wouldn't be using a consumer device for sensitive information anyway.

 

[JRose]

Two wrong attempts and your locked out, so its not really an unlock.

 

[hugo7]

I see this being useful for law enforcement.
People are photographed as part of the arrest process.
So it would be pretty easy to obtain all the facial data needed to access an iPhone X.
No need to compel a person to use their fingerprint to unlock the phone.
Snap a few pics and break out the 3D printer.

This. So many defenders here are getting hung up on the amount of time it takes the guy to create a mask and the "dubious" way he performed the initial scan. The bigger point to take away is that it's just a proof of concept, and thus a process which can be perfected (accelerated) over time.

And no, TouchID isn't any more secure.

These biometric authentication methods will always be less secure than a passcode (which is generally something less visible to others). We sacrifice some security for convenience.

 

[Baymowe335]

So someone steals your phone. Then they have 48 hours to create an exact replica of your face, eyes and all. Then have two chances to get it unlocked.

Even in the video he has to concentrate very hard on we’re he puts the phone for it to unlock. I’d like to know how many chances he had to get it right

Right. He had to build a special jig to get the angle of the phone right.

 

[Glideslope]

Yeah Apple didn’t have failures or half assed products during Steve Jobs era.

Glad you finally admit Face ID is a Failure.

 

[ryanwarsaw]

I thought it had a 1,000,000 in one shot of fooling it..

That’s right. The chances of somebody making a mask of you to do this are way less than that

 

[AppleScruff1]

Glad you finally admit Face ID is a Failure.

I don’t think it’s a failure, it’s a solution to a problem that doesn’t exist.

 

[Thai]

This. So many defenders here are getting hung up on the amount of time it takes the guy to create a mask and the "dubious" way he performed the initial scan. The bigger point to take away is that it's just a proof of concept, and thus a process which can be perfected (accelerated) over time.

And no, TouchID isn't any more secure.

These biometric authentication methods will always be less secure than a passcode (which is generally something less visible to others). We sacrifice some security for convenience.

Are you talking about 4-digit passcode or a 16-alphanumerical passcode that i have on my phone? The 16-passcode is my backup to FaceID. But you think that security cameras in stores, malls, etc. cannot take a peek at your phone while you entered in your passcode? Or someone peeking over your shoulders? Or someone looking at prints on your screen to see where the smudges are?
[doublepost=1511840615][/doublepost]

I don’t think it’s a failure, it’s a solution to a problem that doesn’t exist.

Yeah, like putting a stupid ass fingerprint reader on the back of a phone...but lets put it in a corner too! Now, THAT is a solution to a problem!

 

[lordofthereef]

If only sir Willams were still alive. This calls for a Mrs. Doubtfire II.

 

[AmazingRobie]

Hahahahaha. That crazy Apple. For those complaining about people wasting lots of money to make a mask, you don't understand, this is only the beginning, its not going to stop. The masks will get cheaper and easier to make. The phone's security is worthless. Get over it. Go scan your faces into a database and just wait to be catalogued and have the data "breached" by the NSA or homeland security or whatever the f organization posing as some rogue hacker. You all dont deserve personal privacy.

 

[AppleScruff1]

Are you talking about 4-digit passcode or a 16-alphanumerical passcode that i have on my phone? The 16-passcode is my backup to FaceID. But you think that security cameras in stores, malls, etc. cannot take a peek at your phone while you entered in your passcode? Or someone peeking over your shoulders? Or someone looking at prints on your screen to see where the smudges are?
[doublepost=1511840615][/doublepost]

Yeah, like putting a stupid ass fingerprint reader on the back of a phone...but lets put it in a corner too! Now, THAT is a solution to a problem!

I agree, fingerprint reader on the back of a phone is dumb.

 

[Thai]

Hahahahaha. That crazy Apple. For those complaining about people wasting lots of money to make a mask, you don't understand, this is only the beginning, its not going to stop. The masks will get cheaper and easier to make. The phone's security is worthless. Get over it. Go scan your faces into a database and just wait to be catalogued and have the data "breached" by the NSA or homeland security or whatever the f organization posing as some rogue hacker. You all dont deserve personal privacy.

You have flip phone?

 

[AppleScruff1]

Hahahahaha. That crazy Apple. For those complaining about people wasting lots of money to make a mask, you don't understand, this is only the beginning, its not going to stop. The masks will get cheaper and easier to make. The phone's security is worthless. Get over it. Go scan your faces into a database and just wait to be catalogued and have the data "breached" by the NSA or homeland security or whatever the f organization posing as some rogue hacker. You all dont deserve personal privacy.

They have pills for this.

 

[Annonymoose]

It's more disconcerting to me that a child could pick up a parent's iPhone and have it unlock. This may be rare, but how could it even be allowed to happen at all? To begin with, can't the iPhone tell the difference between a big adult's head and a child's? All this fancy scanning is for not if it can't even handle that trivial task.

Sounds to me like Face ID is, as they say, not yet ready for prime time. Yet another example of why I prefer not to live on the bleeding edge of technology. Let others try the latest and greatest whiz-bang thingy. Get back to me when (1) they've worked out all the bugs (2) got the price down to something reasonable. I'd much rather have yesterday's working technology than tomorrow's technology that doesn't quite work today.

 

[gaximus]

I thought it was 8 hours before the phone defaulted to the passcode?

It’s longer than that because I’ve slept longer than that and had it work in the morning

 

[Thai]

It's more disconcerting to me that a child could pick up a parent's iPhone and have it unlock. This may be rare, but how could it even be allowed to happen at all? To begin with, can't the iPhone tell the difference between a big adult's head and a child's? All this fancy scanning is for not if it can't even handle that trivial task.

Sounds to me like Face ID is, as they say, not yet ready for prime time. Yet another example of why I prefer not to live on the bleeding edge of technology. Let others try the latest and greatest whiz-bang thingy. Get back to me when (1) they've worked out all the bugs (2) got the price down to something reasonable. I'd much rather have yesterday's working technology than tomorrow's technology that doesn't quite work today.

I rather that my son broke into my phone than a stranger getting my prints from a simple photo or table and then using PLAYDOH to access my yesterday's "working" technology.
[doublepost=1511841269][/doublepost]Lots of confusion here...straight from APPLE:

To use Face ID, you must set up a passcode on your iPhone. You must enter your passcode for additional security validation when:

• The device has just been turned on or restarted.
• The device hasn’t been unlocked for more than 48 hours.
• The passcode hasn’t been used to unlock the device in the last six and a half days and Face ID hasn't unlocked the device in the last 4 hours.
• The device has received a remote lock command.
• After five unsuccessful attempts to match a face.
• After initiating power off/Emergency SOS by pressing and holding either volume button and the side button simultaneously for 2 seconds.

If your device is lost or stolen, you can prevent Face ID from being used to unlock your device with Find My iPhone Lost Mode.

 

[Michael Scrip]

It’s longer than that because I’ve slept longer than that and had it work in the morning

Thanks... I must have been thinking of something else.

And you're right... I can sleep longer than 8 hours and my phone still unlocks!

 

[SeattleMoose]

I know this is a bit retro but it is solid and non-creepy....how about having to enter a passcode?

 

[gixxerfool]

Because of the obvious vulnerabilities of FaceID, Apple is now working on SoulID. The problems with it can be easily anticipated.

Gingers won’t be able to use it?

 

[gavroche]

Has anyone else noticed that FaceID got slower in the last couple weeks? Mine was super fast at first, but seems slower now. I wonder if Apple quietly increased the sensitivity or something. It's still quick but not as quick as the first week or 2.

Maybe you have just aged a lot in two weeks and it's having a harder time recognizing you...

 

[coolfactor]

I think the concern is rooted in the fact that the 3D imaging of faces could actually be turned against us. Imagine a 3D camera snapping a "photo", and then a 3D printer quickly reconstructing the face... this stuff is becoming real.

 

[hugo7]

Are you talking about 4-digit passcode or a 16-alphanumerical passcode that i have on my phone? The 16-passcode is my backup to FaceID. But you think that security cameras in stores, malls, etc. cannot take a peek at your phone while you entered in your passcode? Or someone peeking over your shoulders? Or someone looking at prints on your screen to see where the smudges are?
[doublepost=1511840615][/doublepost]

You're missing the point. If any stealth method can figure out your passcode, then those biometric authentication methods are moot (since the device falls back to passcode input). These biometrics methods are not a replacement for the de facto passcode. They are an addition and thus increase the possibility for unlocking a device. Hence, less secure.

 

[HoosBruce]

Who cares.....? Stop wasting so much of your, and our time doing these tests, reporting the findings, and then wasting writers’ time by causing them to have to report on it. So dumb