Hacker Claims to Have Beaten iPhone X's Facial ID with $150 Mask

Hacker Claims to Have Beaten iPhone X's Facial ID with $150 Mask

Hacker Claims to Have Beaten iPhone X's Facial ID with $150 Mask

The technology didn't even fall for well-lit photographs or other faces that had similar features. Fooling the iPhone X Face ID even with Bkav's method would require a lot of research and preparation.

According to Bkav the experiment began right after iPhone X was released.

As it's a proof-of-concept hacking technique that has yet to be confirmed by other security researchers, exact details on how the Bkav researchers created the only mask that can beat Face ID are thin on the ground.

During the launch of the Apple iPhone X one of the major "triumphs" of the device was highlighted as the convenience and security offered by Face ID. As in 2008, we were the first to show that face recognition was not an effective security measure for laptops, ' the researchers said. It's also worth pointing out that the Face ID is one of the most important features on the $999 smartphone. Apple insisted that the new biometric scanner is ultimately more convenient and very secure - there's a one in a million chance that there's a random person somewhere in the world who can unlock your phone with their face, Apple said.


This was done by Vietnamese security firm Bkav. However, we knew about this "learning", thus, to give a more persuasive result, we applied the strict rule of "absolutely no passcode" when crafting the mask. Exploitation is hard for normal users, but simple for professional ones, ' they added.

These users might want to take extra steps beyond Face ID if they want their device fully protected.

Ultimately, the company thinks this probably means that regular iPhone X users aren't at a high risk of having their phone hacked into by mischievous intruders armed with 3D printers and fake noses. Like, you can't just take a photo of someone in the crowd and use it.

All this cost Bkav just $150, though the security firm pointed out that you'd need a pretty thorough understanding of how facial recognition software works to attempt the trickery yourself. The relatively cheap mask apparently can bypass the handset's infrared sensors and mapping technology which needs to connect 30,000 dots on the user's face to confirm his identity.

Related news