91–100 of 244 posts
Earlier quoted context omitted.
Two words: incremental improvement. 3d printing is getting better and cheaper all the time. Cameras and software are getting better all the time. If someone cares enough to invest the R&D it should be pretty easy to automate everything between getting photos someone and printing the mask. The point is that using biometric authentication as an all-in-one isn't secure.
Photos are not enough, they would need a high resolution 3D scan on the person’s face as well. Also they didn’t just use 3D printing, they had to use different fabrication methods and materials for different parts of the face part of which was ‘simply’ hand sculpted. This is not at all trivial to automate. But then we already know it’s not as secure as two factor authentication and a random passcode. Touch ID could b…
“Apple has done this not so well. I remember reading an article on Mashable, in which Apple told that iPhone X had been planned to be rolled out in 2018, but the company then decided to release it one year earlier. This shows that they haven't carried out scientific and serious estimation before deciding to replace Touch ID with Face ID.”
I’m amy case, this doesn’t worry me personally too much. I don’t expect biometrics to be more secure than a password, just reasonably secure and more convenient. Before Touch ID, my passcode was 0000 with a four-hour lock timeout. I only had it set because some apps reduced functionality if no passcode was set. Real world security for me increased a lot with biometrics.
As for fingerprints versus facial recognition, the article claims fingerprints are better, but I’m skeptical. For one thing, my phone is covered in my own fingerprints, so getting something to copy is a lot easier.
"A: It does not matter whether Apple Face ID "learns" new images of the face, since it will not affect the truth that Apple Face ID is not an effective security measure. However, we knew about this "learning", thus, to give a more persuasive result, we applied the strict rule of "absolutely no passcode" when crafting the mask."
Does it mean passcode was completely off and the phone would not lock itself after a few failed attempts? Because there's a difference between trying until it works and getting a mask within 24 hours that does not fail three times.
Earlier quoted context omitted.
There was also a rumor that Apple was having trouble with FaceID recognizing people (it even happened to Craig Federighi on stage!), and they made the security less strict so it recognizes people more easily. For all we know, FaceID doens't have that "1 in a million" False Acceptance Rate" anymore, but only 100,000 which would be a lot closer to a fingerprint.
What happened to Craig was that he tried to unlock a freshly rebooted phone. iOS requires the user’s passcode after booting, and won’t allow a biometric unlock until after that.
"the phone shall recognize you even when you cover a half of your face". I wonder what half and why this works.
Did they configure Face Id, made the mask and then it worked immediately? Did they tinker with the mask until it worked? From the way this is written I suppose the latter.
Nevertheless, I thought Apple was detecting small movements in eyes to ensure that the subject in front is actually a living human. I don't know where I got this from, but now I am disappointed.
Earlier quoted context omitted.
It's definitely a better situation than an attacker being able to steal your fingerprint off a glas or other everyday object. Copying a fingerprint requires very little skill.
I thought you needed a 3D fingerprint to fool an iPhone—a holding from an impression in clay rather than a spear on a window.