Face ID defeated by a mask

FaceID defeated by a mask

The arrival of the new security gateway that Apple uses on its iPhone is called Face ID. It is the replacement for Touch ID, that fingerprint reader that was used in mobile phones and iPads since the appearance of the iPhone 5S. However, on the iPhone X this reader disappears - next to the physical button «Home» - to make way for a much more complex front camera than those used up to now.

In the presentation of the new Apple mobile it was commented that this method was practically infallible. Moreover, to make matters worse, Apple gave numbers and commented that Face ID's error rate was 1 in a million; if this had to be compared with Touch ID, the latter achieved a rate of 1 out of 50.000. That is, nothing to do with one system with another. However, a Vietnam-based cybersecurity company, Bkav, has shown that Face ID can be beaten. And best of all, with a printed mask.

Bkav has been working to defeat the famous security system that incorporates, for the moment, the iPhone X exclusively. The cyber security company has used a 3D printed mask to bypass the security of the depth sensors on Apple's phone. Likewise, up to 3 days it took to build this mask which is made from a makeup base and a special 'skin' base for this.

The cost of the materials has reached 150 dollars. Of course, you will need a 3D printer to carry out the production. Therefore, although it is not a method in which special attention should be paid, as we can see in the video that accompanies this article, Face ID is not foolproof. What's more, the company itself states that biometric fingerprint readers are a more reliable method.


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: Miguel Ángel Gatón
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.