Vietnamese Firm Unlocked The IPhone X Face ID With A Mask

Posted November 14, 2017

The smartphone rival admitted the flaw but said that it never claimed facial recognition was uncrackable.

In addition to features such as keeping track of changes in facial appearance, Apple also offers an anti-spoofing software to stop Face ID trickery.

Bkav, however, claimed to have bypassed the Face ID technology using a mask that features both 2D and 3D components, including 3D printed plastic, a silicone nose, makeup and paper cutouts. However, we knew about this "learning", thus, to give a more persuasive result, we applied the strict rule of "absolutely no passcode" when crafting the mask.

Face ID's anti-spoofing measures.

The mask used to test the Face ID feature.

A cybersecurity firm have apparently successfully tricked Face ID into unlocking with a specially made mask, imitating a real person's face. Now, Bkav says that its 3D printed mask proves that Apple's new Face ID is "not an effective security measure".

One week has passed, since Apple launched iPhone X, while the race between hackers to dodge its Face ID has finally come to an end. Apple points out that it uses infrared sensors and mapping dots to scan for 3D images.

Apple has yet to respond to the potential for Face ID to be tricked, but it would appear that despite Cupertino's claims its face scanning and recognition tech isn't quite as robust as it would first seem, though there's a chance that updates further down the line could strengthen Face ID against such tricks. If hackers succeed in fooling Face ID by using similar concepts, they would target billionaires, leaders of major corporations, and nation leaders rather than regular users.

Apple declined to comment, referring to its Face ID security report for details. "If convenience is more important, Face ID may be your choice".

"What they didn't disclose was how many attempts and what level of effort it took to get the mask to work flawlessly", Paul Norris, senior systems engineer at Tripwire, a Portland, Oregon, software security company, said in a statement Monday. The mask faces an iPhone X, which is placed on a stand. Bkav added that they are also working on other versions of the technique that could make it easier to unlock someone's iPhone X. Remarkably, in spite of their fairly elaborate efforts - including "details like eyeholes created to allow real eye movement" and "thousands of eyebrow hairs inserted into the mask meant to look more like real hair" - Wired and Cloudflare didn't succeed.

Bkav did not give details of how long it took for its iPhone X to unlock with the mask.