Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Face ID beaten by mask

bkav.com

Post reply on HN
Print view View original

21–30 of 244 posts

Re: Face ID beaten by mask

#21

Post by cdubzzz »

WA wrote: post #4

The 1st point is, everything went much more easily than you expect. You can try it out with your own iPhone X, the phone shall recognize you even when you cover a half of your face. It means the recognition mechanism is not as strict as you think, Apple seems to rely too much on Face ID's AI. We just need a half face to create the mask. It was even simpler than we ourselves had thought. Interesting. I expected this t…

> We used a popular 3D printer. Nose was made by a handmade artist. We use 2D printing for other parts (similar to how we tricked Face Recognition 9 years ago). The skin was also hand-made to trick Apple's AI.

That seems reasonably obscure (:

Re: Face ID beaten by mask

#22

Post by jbg_ »

KeitIG wrote: post #13

So, fingerprints are not "secure", face recognition is not "secure"... Are passwords/double authentication the only way to keep things private and secure these days? Are there any serious alternative?

A fingerprint is just a really complex password that you leave on everything you touch. Your face is just a really complex password that is written on the front of your head.

It should be self-evident that neither of these is "secure" for some level of "security", but they might be perfectly fine for the level of threat that you face, which is not likely to be particularly high. But I don't know you, so maybe you face a higher-than-average level of threat, in which case, yes, a sufficiently long password/passphrase that you memorise is probably the best option for your mobile device.

Re: Face ID beaten by mask

#23

Post by delinka »

fermuch wrote: post #18
baxtr wrote: post #5

> A: We used a popular 3D printer. Nose was made by a handmade artist. We use 2D printing for other parts (similar to how we tricked Face Recognition 9 years ago). The skin was also hand-made to trick Apple's AI. > Q: What's the approximate cost of the mask? > A: ~ 150 USD Taken together, the second answer cannot be true. Only if the cost stated is related to material cost only, which is is only one input factor to a…

What other cost are you referring to? The 3D printer? You can send your design to a studio and they'll print it for you and send it, or you can rent time in some places to get access to a printer, without needing to buy one. In any case, if it needed only a paper print, you wouldn't count the cost of the printer, since you can print it anywhere.

Human labor is expensive. Not accounting for that is a bit disingenuous.

Re: Face ID beaten by mask

#24

Post by thoughtsimple »

steve19 wrote: post #11
thoughtsimple wrote: post #7

Nevermind. Should have read the article. I thought it was the same as the one I saw over the weekend.

Edit: the op asked if this could be done with the user knowing (I don't know why the question was removed). "We might use smartphones with 3D scanning capabilities (like Sony XZ1); or set up a room with a 3D scanner, a few seconds is enough for the scanning (here's an example of a 3D scanning booth). An easier way is photograph-based, artists craft a thing from its photos. Take the nose of our mask for example, its c…

I tried to delete it but you were too quick to answer so deletion was blocked. The question was clearly answered in the article.

Re: Face ID beaten by mask

#25

Post by delinka »

x0x0 wrote: post #15
baxtr wrote: post #5

> A: We used a popular 3D printer. Nose was made by a handmade artist. We use 2D printing for other parts (similar to how we tricked Face Recognition 9 years ago). The skin was also hand-made to trick Apple's AI. > Q: What's the approximate cost of the mask? > A: ~ 150 USD Taken together, the second answer cannot be true. Only if the cost stated is related to material cost only, which is is only one input factor to a…

Nitpicking the cost of the labor to build this mask misses the point of the article: face id is much less secure than Apple claims.

What claims have they made? That it can’t be fooled by masks? No. That one in a million other faces can open your phone. That’s still fewer people than could open you phone with Touch ID.

At no time that I’m aware have Apple claimed resilience against masks or gelatin fingers.

Re: Face ID beaten by mask

#26

Post by schappim »

They're an "Interesting" company...

I'm not sure the authenticity of this story. The authors of the hack claim to be: "the leading firm in network security, software, smartphone manufacturing (Bkav.com/Bphone) and smarthome"[sic] and one of their products is a "gold plated SmartHome for super luxury villas".

I wonder if it will work is ordinary luxury villas...

Re: Face ID beaten by mask

#27

Post by Arnt »

sambeau wrote: post #9

As a consumer this doesn't worry me as to be able to crack my phone it looks like they would already have to have access to my face to make the mask (and an expert sculpture to make a nose). If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. For spies, spooks, government agents etc. I suspect that Face ID…

Remember: Attacks always grow better, not worse. The bluetooth distance records grew quite quickly.

Re: Face ID beaten by mask

#28

Post by dsfyu404ed »

sambeau wrote: post #9

As a consumer this doesn't worry me as to be able to crack my phone it looks like they would already have to have access to my face to make the mask (and an expert sculpture to make a nose). If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. For spies, spooks, government agents etc. I suspect that Face ID…

Two words: incremental improvement.

3d printing is getting better and cheaper all the time.

Cameras and software are getting better all the time.

If someone cares enough to invest the R&D it should be pretty easy to automate everything between getting photos someone and printing the mask.

The point is that using biometric authentication as an all-in-one isn't secure.

Re: Face ID beaten by mask

#29

Post by M4v3R »

sambeau wrote: post #9

As a consumer this doesn't worry me as to be able to crack my phone it looks like they would already have to have access to my face to make the mask (and an expert sculpture to make a nose). If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. For spies, spooks, government agents etc. I suspect that Face ID…

Also, it took them a whole week to achieve this. So this is definitely not something someone could realistically do to you unless you are a some sorts of high-profile target.

Re: Face ID beaten by mask

#30

Post by dsfyu404ed »

delinka wrote: post #23
fermuch wrote: post #18

Earlier quoted context omitted.

What other cost are you referring to? The 3D printer? You can send your design to a studio and they'll print it for you and send it, or you can rent time in some places to get access to a printer, without needing to buy one. In any case, if it needed only a paper print, you wouldn't count the cost of the printer, since you can print it anywhere.

Human labor is expensive. Not accounting for that is a bit disingenuous.

Artists aren't particularly well paid.
Post reply on HN