{"id":10442,"date":"2017-11-13T07:45:07","date_gmt":"2017-11-13T15:45:07","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/11\/13\/news-4215\/"},"modified":"2017-11-13T07:45:07","modified_gmt":"2017-11-13T15:45:07","slug":"news-4215","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/11\/13\/news-4215\/","title":{"rendered":"iPhone X&#8217;s Face ID Can Be Fooled With a 3D-Printed Mask"},"content":{"rendered":"<p><strong>Credit to Author: Daniel Oberhaus| Date: Mon, 13 Nov 2017 15:02:34 +0000<\/strong><\/p>\n<p> Last week, researchers at the Vietnamese cybersecurity firm Bkav announced that they had made a mask that could fool the iPhone X\u2019s facial recognition system, Face ID. The mask consists of a 3D-printed frame, a silicone nose that was hand-sculpted by artists, and a few photos that were layered on top of the mask.<\/p>\n<div data-iframely-id=\"N6kZJ9Z\" data-embedded-url=\"https:\/\/www.youtube.com\/watch?v=i4YQRLQVixM\" class=\"article__embed article__embed--iframely\">\n<div style=\"left: 0; width: 100%; height: 0; position: relative; padding-bottom: 56.2493%;\" data-iframely-smart-iframe=\"true\"><iframe  src= width=\"100%\" height=\"420\" frameborder=\"0\" ><\/iframe> <\/div>\n<\/div>\n<p> The mask only required about $150 worth of materials, but don\u2019t expect to see everyone creating security-destroying masks at home any time soon. The mask also required a sophisticated facial scanning system to get the features just right, as well as the work of a professional artist to tweak the nose so it would fool Face ID.<\/p>\n<p> In their write-up about the mask, however, the Bkav researchers said that breaking Face ID \u201cwas even simpler than we ourselves had thought.\u201d<\/p>\n<p> \u201cAfter nearly 10 years of development, face recognition is not mature enough to guarantee security for computers and smartphones,\u201d the researchers <a href=\"http:\/\/www.bkav.com\/d\/top-news\/-\/view_content\/content\/103968\/face-id-beaten-by-mask-not-an-effective-security-measure\" target=\"_blank\">wrote<\/a>. \u201cWith Face ID&#8217;s being beaten by our mask, FBI, CIA, country leaders, leaders of major corporations, etc. are the ones that need to know about the issue, because their devices are worth illegal unlock attempts. Exploitation is difficult for normal users, but simple for professional ones.\u201d<\/p>\n<div class=\"article__media\"><picture class=\"article__image\"><source media=\"(max-width: 25em)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png?resize=400:*, https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png?resize=600:* 2x\"><source media=\"(max-width: 40.625em)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png?resize=650:*, https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png?resize=975:* 2x\"><source media=\"(min-width: 40.625em)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png?resize=680:*\"><img decoding=\"async\" src=\"https:\/\/video-images.vice.com\/_uncategorized\/1510585019905-2.png\" alt=\"\"><\/picture>\n<div class=\"article__image-caption\">Some of the face masks used to train Face ID. Image: Apple<\/div>\n<\/div>\n<p> Bkav claims to be the first to use a mask to fool Face ID, an impressive feat considering how much effort Apple put into designing the facial recognition feature to ensure this wouldn\u2019t happen. Each time Face ID is used to unlock an iPhone X, it essentially creating a topographical map of a user\u2019s face based on a 30,000 point scan. A neural network is then used to compare this scan with an initial scan provided by the user to determine a match and prevent spoofing. <\/p>\n<p> According to Apple, the neural network behind Face ID was trained on over 1 billion faces. During a <a href=\"https:\/\/www.apple.com\/vn\/apple-events\/september-2017\/\" target=\"_blank\">presentation last September<\/a>, the company said it even enlisted the help of special effects professionals to design masks meant to trick Face ID during the testing process. As a result, the company said the odds of some rando being able to use Face ID to unlock your iPhone X is about 1 in a million\u2014although the security system can <a href=\"https:\/\/www.youtube.com\/watch?v=FhbMLmsCax0\" target=\"_blank\">easily be fooled by identical twins<\/a>.<\/p>\n<p class=\"article__blockquote\"><b>Read More: <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/qkjxpb\/it-wont-be-difficult-to-spoof-smartphone-finger-vein-scanners\" target=\"_blank\">It Won&#8217;t Be Difficult to Spoof Smartphone Finger Vein Scanners<\/a><br \/><\/b><\/p>\n<p> For most users, this sort of hack probably shouldn\u2019t be of much concern\u2014it takes too much time and energy to make a mask to fool the iPhone X, not to mention the consent of the user. The real threat is for public figures, whose facial figures readily available in photos and relatively easier for an artist to replicate from these photos. It\u2019s also not hard to see how similar techniques could be used by law enforcement agencies for easy access to a locked iPhone X. <\/p>\n<p> Apple never claimed Face ID is perfectly secure. But the fact that this Vietnamese security firm was able to break it within just a week of the phone\u2019s release is a timely reminder that biometric security has a long way to go.<\/p>\n<p><a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/qv3n77\/iphone-x-face-id-mask-spoof\" target=\"bwo\" >https:\/\/motherboard.vice.com\/en_us\/rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/video-images.vice.com\/articles\/5a09b256feaefa02128b3a67\/lede\/1510584939643-1.png\"\/><\/p>\n<p><strong>Credit to Author: Daniel Oberhaus| Date: Mon, 13 Nov 2017 15:02:34 +0000<\/strong><\/p>\n<p>\u201cIt was even simpler than we ourselves had thought.\u201d<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10643,13328,10378],"tags":[2211,16572,14737,8826],"class_list":["post-10442","post","type-post","status-publish","format-standard","hentry","category-independent","category-motherboard","category-security","tag-apple","tag-bkav","tag-face-id","tag-iphone"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=10442"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/10442\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=10442"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=10442"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=10442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}