Live data from Hacker News

Face ID beaten by mask

bkav.com

101–110 of 244 posts

Re: Face ID beaten by mask

#101
post #75
post #51

Earlier quoted context omitted.

It's definitely a better situation than an attacker being able to steal your fingerprint off a glas or other everyday object. Copying a fingerprint requires very little skill.

I thought you needed a 3D fingerprint to fool an iPhone—a holding from an impression in clay rather than a spear on a window.

No, you can put a thin printed 2d fingerprint onto your finger to fool it.

Re: Face ID beaten by mask

#102
post #77
post #9

As a consumer this doesn't worry me as to be able to crack my phone it looks like they would already have to have access to my face to make the mask (and an expert sculpture to make a nose). If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. For spies, spooks, government agents etc. I suspect that Face ID…

>If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. I would be astonished if state actors are not already well on their way to figuring out how to do this.

>For spies, spooks, government agents etc. I suspect that Face ID would always be a no-no as it is much harder to control the ability of others to eavesdrop.

Re: Face ID beaten by mask

#103
post #25
post #15

Earlier quoted context omitted.

Nitpicking the cost of the labor to build this mask misses the point of the article: face id is much less secure than Apple claims.

What claims have they made? That it can’t be fooled by masks? No. That one in a million other faces can open your phone. That’s still fewer people than could open you phone with Touch ID. At no time that I’m aware have Apple claimed resilience against masks or gelatin fingers.

Yes, Apple claimed that it can't be fooled by masks. The article even has the picture from the slide of the presentation. Did you read it?

Re: Face ID beaten by mask

#104
Why not layer on more data? Like a facial gesture (smile, wink, tongue out, etc) and a fingerprint? Both using thermal readings as "proof". Given you're almost always using your face and hands, this isn't much of an inconvenience but it's powers more secure. All for pennies (in comparison to a $1k device).

It's infuriating that each time a mass-produced biometric scanner comes out, it's hogtied by the fact this cheap technology isn't quite good enough yet.

Re: Face ID beaten by mask

#105
post #101
post #75

Earlier quoted context omitted.

I thought you needed a 3D fingerprint to fool an iPhone—a holding from an impression in clay rather than a spear on a window.

No, you can put a thin printed 2d fingerprint onto your finger to fool it.

This isn't true, touchID requires a living person/something that simulates a living person to unlock.

Re: Face ID beaten by mask

#106

I feel like this demo is not really good. A video where a (real) face is learned in and then the mask is used to unlock would be good, this could just show that the mask is learned into FaceID.

Or at least the lock on top of the screen could do the unlock animation when they use the mask. ;)

Re: Face ID beaten by mask

#107
post #34

Would it be possible to just capture the IR beams with a camera, and use a projector to send to the phone's sensor a new set of IR points as they would appear if they were projected on an actual 3D model? This would allow to use only a digital model of a face, without the need for printing it.

FaceID resists this by using a random dot pattern. If the pattern it gets back doesn't match what it sends you get a lockout.

Re: Face ID beaten by mask

#108
post #51
post #9

As a consumer this doesn't worry me as to be able to crack my phone it looks like they would already have to have access to my face to make the mask (and an expert sculpture to make a nose). If they could demonstrate it working from a 3D printed mask taken from a surreptitious scan at distance in the outdoors then I think we'd have reason to be worried. For spies, spooks, government agents etc. I suspect that Face ID…

It's definitely a better situation than an attacker being able to steal your fingerprint off a glas or other everyday object. Copying a fingerprint requires very little skill.

> or other everyday object

You mean like a phone or something?

Re: Face ID beaten by mask

#109
post #66
post #13

So, fingerprints are not "secure", face recognition is not "secure"... Are passwords/double authentication the only way to keep things private and secure these days? Are there any serious alternative?

Fingerprint or face or retina is not a "password", it is a "login". And we should have a proper password in addition to the login, not as a substitute.

One problem with passwords is that one has to use an input device like a keyboard or touchscreen to enter them (not needed with a password manager but how to enter that? via a password). Cameras and eyes can record this. Wouldn't surprise me if software can already accurately record keystrokes via a camera feed.

Re: Face ID beaten by mask

#110
post #105
post #101

Earlier quoted context omitted.

No, you can put a thin printed 2d fingerprint onto your finger to fool it.

This isn't true, touchID requires a living person/something that simulates a living person to unlock.

Isn’t that why they said to put it on you finger?
Post reply on HN