Iphone X Face ID.. can you fool it with a photo?

[omega3]

So iphone X is gonna have Face ID. Can't you fool that by holding a portrait photo of the owner in front of it? Also, why no Touch ID on the back? Seems a very flawed concept.

 

[MagnusTheBrewer]

So iphone X is gonna have Face ID. Can't you fool that by holding a portrait photo of the owner in front of it? Also, why no Touch ID on the back? Seems a very flawed concept.

That would be purchasing it in the first place.

 

[omega3]

But am I correct Face ID can be tricked like that? Why hasn't this been pointed out more?

 

[Oyeve]

Apple says there face Id is near foolproof. As for touch id, Apple couldn't get it to work below the screen so they probably deemed it not necessary. Like last year headphone jack, which coincided with their wireless pods. Can't wait to see what they'll say you don't need next year.

 

[jpiniero]

You'll have to wait until the release to find out how foolproof FaceID is. You know people will try to break it.

According to the rumors, Apple tried (and tried) to get TouchID to work underneath the glass but could not get it working reliably enough to be able to mass produce.

 

[sxr7171]

But am I correct Face ID can be tricked like that? Why hasn't this been pointed out more?

Obviously not. Have you read anything about how it works? I suggest that first. How would a 2D photo fool a 3D scanner? Ridiculous question to be honest. If the question were regarding 3D sculpted masks it would entertain discussion.

 

[omega3]

How is that obvious? How are you so sure a "3D scanner" can't be tricked by an enhanced picture or a (moving) image of you on a tablet/PC?

 

[sxr7171]

How is that obvious? How are you so sure a "3D scanner" can't be tricked by an enhanced picture or a (moving) image of you on a tablet/PC?

It is obvious. It measures depth. I suggest doing some basic reading. No offense. Think about the difference between an X-ray and a CT. Also look up how a Kinect works.

 

[Trumpstyle]

You can't fool it with Picture or high quality hollywood mask according to apple. But we ofc need to w8 for reviews to confirm.

 

[Kaido]

Identical twins can unlock each other's phones:

A manual defeat for FaceID has been found, for the cost of $200:

1. 3D mask (stone powder)
2. Printed 2D eyes from infrared images

http://www.bkav.com/d/top-news/-/vi...d-do-not-use-face-id-in-business-transactions

Spoofing TouchID isn't hard either. The hacker who did it originally has also been able to recreate famous people's fingerprints based on publicly-available high-resolution photos:

https://arstechnica.com/information...erprint-reproduced-using-photos-of-her-hands/

Security is scary.

 

[Commodus]

Identical twins can unlock each other's phones:

A manual defeat for FaceID has been found, for the cost of $200:

1. 3D mask (stone powder)
2. Printed 2D eyes from infrared images

http://www.bkav.com/d/top-news/-/vi...d-do-not-use-face-id-in-business-transactions

Spoofing TouchID isn't hard either. The hacker who did it originally has also been able to recreate famous people's fingerprints based on publicly-available high-resolution photos:

https://arstechnica.com/information...erprint-reproduced-using-photos-of-her-hands/

Security is scary.

The same thing I said about fooling fingerprint readers applies to Face ID, though. If someone has the will and means to create a mask just to bypass your phone's Face ID, you have much bigger problems than whether or not they might read your text messages.

Many people forget that biometrics aren't necessarily meant to be more secure than a password -- they're meant to be more convenient than a password without reducing security. Treat it accordingly and you'll be fine.

 

[Red Storm]

The same thing I said about fooling fingerprint readers applies to Face ID, though. If someone has the will and means to create a mask just to bypass your phone's Face ID, you have much bigger problems than whether or not they might read your text messages.

Many people forget that biometrics aren't necessarily meant to be more secure than a password -- they're meant to be more convenient than a password without reducing security. Treat it accordingly and you'll be fine.

This.

Unfortunately Face ID or Touch ID by themselves are not 100% ideal. Having both (fingerprint sensor beneath the display) would be the best setup, and I hope Apple does eventually go that route, but I doubt it.

 

[Commodus]

This.

Unfortunately Face ID or Touch ID by themselves are not 100% ideal. Having both (fingerprint sensor beneath the display) would be the best setup, and I hope Apple does eventually go that route, but I doubt it.

I suspect Apple would see having both as redundant, and I wouldn't blame it. Better to pour that energy into perfecting Face ID than giving the impression that Touch ID is needed as a backup (not to mention the physical design constraints an under-glass reader requires).

 

[Red Storm]

I suspect Apple would see having both as redundant, and I wouldn't blame it. Better to pour that energy into perfecting Face ID than giving the impression that Touch ID is needed as a backup (not to mention the physical design constraints an under-glass reader requires).

I don't see how they can though, I routinely have to put in my passcode because of two situations: phone on desk, and not looking directly at phone. Both of these scenarios are faster and more efficient with fingerprint sensors. Not to mention that while Face ID is neat, it's also definitely slower than fingerprint unlock.

 

[Commodus]

I don't see how they can though, I routinely have to put in my passcode because of two situations: phone on desk, and not looking directly at phone. Both of these scenarios are faster and more efficient with fingerprint sensors. Not to mention that while Face ID is neat, it's also definitely slower than fingerprint unlock.

Well, this is part of why I mentioned refining Face ID. Make it faster (remember how Touch ID got much faster with the iPhone 6s?), widen the recognition angles, that sort of thing. It's never going to be flawless, but it could be improved to the point where early pain points become relatively minor.

 

[Eug]

Face ID seems inherently less secure than Touch ID.

Chinese woman’s coworker unlocks iPhone X via Face ID.

http://m.scmp.com/news/china/societ...ffered-refund-after-facial-recognition-allows

Woman’s son unlocks iPhone X via Face ID.

https://www.google.ca/amp/s/www.wired.com/story/10-year-old-face-id-unlocks-mothers-iphone-x/am

Yes that woman’s coworker looks like her and that other woman’s son looks like her, but this essentially never happens with Touch ID.