Vietnamese security firm Bkav said it has managed to bypass the iPhone X’s Face ID system using a 3D mask with makeup and claimed that facial recognition is “not mature enough” for either Smartphone’s or computers.
In September during Apple’s iPhone X event, marketing head Phil Schiller said that the company “worked with professional mask makers and makeup artists in Hollywood” during development, even creating a collection of masks to train the X’s neural network.
But Bkav cracked Face ID with a composite mask of 3-D-printed plastic, silicone, makeup, and simple paper cutouts, which in combination tricked an iPhone X into unlocking.
The security firm posted a video in YouTube, where you can see one of the company’s staff pulling a piece of cloth from a mounted mask facing an iPhone X on a stand, and the phone instantly unlocks.
The firm haven’t yet revealed much about their process, or the testing that led them to that technique, which may prompt some skepticism. But they say that it was based in part on the realization that Face ID’s sensors only checked a portion of a face’s features.
Bkav researchers wrote in a blog that “The recognition mechanism is not as strict as you think; we just used a half face to create the mask. It was even simpler than we ourselves had thought.” The cost of making this mask is relatively inexpensive at $150 and said they began working on the mask right after receiving their iPhone X on November 5th. That means it was able to create a bypass for Face ID in less than a week.
Marc Rogers from Cloud Flare said “I would say if this is all confirmed, it does mean Face ID is less secure than Touch ID.”
Though some people are sceptical about Bkav but Rogers, a researcher for security firm Cloud flare said “For the moment I can’t rule out that these guys might be tricking us a bit.”