Published: Thu, November 30, 2017
Markets | By Rosalie Gross

New Video Proves iPhone X's Face ID Can Be Tricked By Masks

New Video Proves iPhone X's Face ID Can Be Tricked By Masks

In case you needed more proof, the company behind the first video, a Vietnamese security company called Bkav, has since uploaded a new video with a new mask made out of different material, 2D infrared images of eyes taped over the mask, and also with the "Require Attention" feature on.

From there, Bkav is successfully able to unlock the iPhone X using just the 3D printed mask, even with attention detection enabled.

About 2 weeks ago the company has suggested that important people like billionaires, business leaders and national leader should be very careful while using the Face ID. This time around the video clearly shows that both the "Require Attention for Face ID" and "Attention Aware Features" were turned on in the iPhone X used for testing. This is because Face ID mistakenly recognizes the infrared images as real eyes.

The researchers were able to fool Face ID with a 3D printed mask of the experts face made of stone powder. The security firm recommends that iPhone X users do not use Face ID to verify their identity in financial transactions.

Now is this a reason to be cautious about using Face ID? However, with this research result, we have to raise the severity level to every casual users: "Face ID is not secure enough to be used in business transactions".

Once the mask was set up to match an iPhone X's owner's face, with the strictest security settings, it can apparently quickly trick the $999 iPhone security tech, unlocking the handset immediately.

More news: USA court upholds Trump admin takeover of Consumer Financial Protection Bureau

The process, as simple as Bkav likes to make it sound, is still rather complex.

Then the photos would need to be processed by algorithms, and then you'd need to 3D print a mask. All in all, Bkav estimates the process runs around $200.

Funnily enough, this latest experiment was actually a direct response to Apple, which claimed upon the iPhone X's launch that Face ID could probably only be hacked if you happened to have an "evil twin".

"Require Attention" basically adds an extra layer of security to Face ID.

The video can be seen below.

The demonstrator in the video starts out by deleting previous Face ID data and registering his face again.

Like this: