Face ID fails the mask test-again

  • Face ID fails the mask test-again

Face ID fails the mask test-again

Additionally, Bkav noted that Face ID was unable to "learn" to correct its mistake, consistently allowing the "artificial twin" mask to unlock the phone during successive attempts. It's no surprise then that Bkav prefers fingerprint authentication, which it claims is the "most secure biometric technology".

Now before any iPhone X users start panicking, it's worth noting that criminals using this technique would still need direct access to your phone; they can't simply go around waving masks in the vague hope of unlocking iPhones. In the video, the mask unlocks the phone successfully twice, bypassing the required attention feature in the process - suggesting that a mask can actually fool iPhone's Face ID.

This time, Bkav used stone powder to make "the mask ver 2.0" and used 2D images for the eyes.

"About two weeks ago, we recommended that only very important people such as national leaders, large corporation leaders, billionaires, etc. should be cautious when using Face ID". The iPhone X failed to tell twins apart in Mashable's tests but didn't have any problems when Business Insider tried a similar experiment. However, with this research result, we have to raise the severity level to every casual users: "Face ID is not secure enough to be used in business transactions", said Bkav Vice President of Cybersecurity Ngo Tuan Anh, as he explained just how much of an improvement this mask was over its predecessor. All in all, Bkav estimates the process runs around $200.

This is not the first time Face ID has been fooled.

Both of those features are meant to add an extra layer of security to Face ID by forcing the user to look at the iPhone to unlock. After a few seconds of getting the right position, you can clearly see in the video that the iPhone X is unlocked. However, at that time, questions were raised whether the company had turned the Face ID's "Required Attention" feature on or not. Real world attacks using this method would require an accurate scan of a victim's face-Bkav used a 3D scanning booth for their images-and we still don't know the exact details of how the mask was created.