Apple iPhone X unlocked again via Face ID using a mask
Nov 29 2017
A security firm from Vietnam called Bkav was able to defeat Face ID security earlier this monthusing an ornate mask. It's no surprise then that Bkav prefers fingerprint authentication, which it claims is the "most secure biometric technology". At the iPhone X launch event, Apple admitted its facial recognition tech could be tricked by an "evil twin", but assured people it had worked with Hollywood studios to prevent masks being used as hacking tools.
Meanwhile, Apple also demonstrates how Face ID adapts as your face evolves - whether it is due to new glasses, makeup, or hairstyle: iPhone X recognises you, even when you change your look.
"About two weeks ago, we recommended that only very important people such as national leaders, large corporation leaders, billionaires, etc. should be cautious when using Face ID". Thus, to Face ID, the mask mimics a real face with eyes.
To show how effective this new mask is, the company reset FaceID settings and re-enrolled the face in the iPhone X, which goes on to prove that artificial twin mask can unlock the phone even when held in hand.
Now, in order to hammer home their point, Bkav has uploaded another video in which they showcase a 200 dollar 3D mask being used to fool iPhone X's Face ID. As soon as the iPhone X became available for sale, they immediately conducted experiments based on previous analysis to confirm the "foreseeable" weakness, and just as predicted, Face ID was defeated by the mask.
If that wasn't bad enough, Bkav claims its second edition mask is "very simple" to make and can be done without raising the iPhone X owner's suspicions. If Face ID fails to recognize within 5 tries, it will lock and require a passcode. However, at that time, questions were raised whether the company had turned the Face ID's "Required Attention" feature on or not.
This is not the first time Face ID has been fooled. Real world attacks using this method would require an accurate scan of a victim's face-Bkav used a 3D scanning booth for their images-and we still don't know the exact details of how the mask was created.