Live data from Hacker News

FaceID Security [pdf]

images.apple.com

11–20 of 314 posts

Re: FaceID Security [pdf]

#11
post #3

>You can always use your passcode instead of Face ID, and it’s still required under the following circumstances: >The device has received a remote lock command. I haven't had an iPhone since the 3Gs - how are these sent? Via cellular data I assume, but is there some app you have to have on your computer?

No, you can send the lock via the iCloud website. Although, to log on, you may have to use a 2FA code that is sent to your device or home Mac....

No, you can activate Lost Mode without 2FA.

Re: FaceID Security [pdf]

#12
> To counter both digital and physical spoofs, the TrueDepth camera randomizes the sequence of 2D images and depth map captures, and projects a device-specific random pattern.

I await some interesting articles featuring IR imaging after the X ships.

Re: FaceID Security [pdf]

#14

"Face ID confirms attention by detecting the direction of your gaze" So to the argument that police can force you to open your iPhone if secured with TouchID, is this perhaps more secure? If you refrain from looking at your phone?

No, any kind of biometric auth is vulnerable to the adversary forcing your physical compliance.

However you can disable TouchID and FaceID both by pressing the power button five times in quick succession, after which it will require your passcode.

Re: FaceID Security [pdf]

#15

"Face ID confirms attention by detecting the direction of your gaze" So to the argument that police can force you to open your iPhone if secured with TouchID, is this perhaps more secure? If you refrain from looking at your phone?

[deleted]

Re: FaceID Security [pdf]

#17

"Face ID confirms attention by detecting the direction of your gaze" So to the argument that police can force you to open your iPhone if secured with TouchID, is this perhaps more secure? If you refrain from looking at your phone?

No, any kind of biometric auth is vulnerable to the adversary forcing your physical compliance. However you can disable TouchID and FaceID both by pressing the power button five times in quick succession, after which it will require your passcode.

For the iPhone X it's hold both the power button and either volume button for 2 seconds.

Re: FaceID Security [pdf]

#18
Good document, but I was really hoping they’d go deeper into how they tested some of the fraud detection stuff (masks, etc) or give us some statistics on the twin/family member issue.

Re: FaceID Security [pdf]

#19

"Face ID confirms attention by detecting the direction of your gaze" So to the argument that police can force you to open your iPhone if secured with TouchID, is this perhaps more secure? If you refrain from looking at your phone?

I doubt police will let a little thing like constitutional arguments keep them from forcing you to unlock your phone.

The best decryption algorithm is still rubber hose decryption.

Re: FaceID Security [pdf]

#20
> The probability of a false match is different for twins and siblings that look like you as well as among children under the age of 13, because their Face ID Security September 2017 2 distinct facial features may not have fully developed. If you're concerned about this, we recommend using a passcode to authenticate.

I was really hoping they'd provide the probability for identical twins, but maybe they don't have enough data to give a specific number on this (I assume most of their data comes from people without identical twins).

Post reply on HN