Experts managed to fool Face ID on iPhone X with a 3D mask

November 28, 2017

The iPhone X has been dubbed by many as the device of the future, and not without reason. Its new features, culminating in Face ID, the new user recognition technology that has replaced Touch ID, are exciting, pushing the smartphone industry in new directions.

But anything that is much talked about, it does not take long to pass the corresponding tests, in order to prove whether what is said represents it.

In the case of the iPhone X, the much talked about feature is Face ID or "Face Recognition". Apple itself said that it is much more secure than Touch ID, as the chances of it being hacked are 1:1,000,000, when in Touch ID the ratio was 1:50,000.

A few days ago we saw Face ID being "bypassed" by some twin brothers and a little boy who managed to unlock his mother's iPhone X without registering his face.

This time it was the turn of some cybersecurity experts who created a 3D mask to unlock the iPhone X via Face ID.

Earlier this month, a video from cybersecurity firm Bkav showed Face ID being fooled by a very well-designed mask that exactly replicated the human face. This time the mask was 3D and even more accurate than the first time where it still managed to unlock the iPhone X.

The company's research department explains that the new mask was created from stone powder with 2D infrared eye images embedded in the mask. This allowed Face ID to see "real" eyes as well as a face.

In the video below, Bkav's "presenter" sets up Face ID normally, using his face. In addition, he has the option enabled that wants the user to look at the device so that it will unlock.

With the exact same settings, using a 3D mask of his face, he managed to unlock the iPhone X. This happened after Face ID recognized the "infrared" eyes as real.

Bkav suggests that very influential people after her first video, such as heads of state, should not use Face ID. Now, after the second successful experiment, the above suggestion also applies to ordinary users, at least as far as their money transactions are concerned.

But the process that the company says is simple is not so simple. Fooling Face ID isn't that easy, especially when we're talking about a mask. First, you need a very high-quality photo of the person whose iPhone X, is about to be hacked. In addition, you'll need a 3D printer and a lot of other materials as well as direct access to the owner's device. Bkav estimates the cost of the process at around $200.

Also note that in order for a mask to fool Face ID, it has to be extremely accurate, since after the first 5 failed attempts, the device locks up and asks for a password.

Finding someone who would make a 3D mask in order to fool the iPhone X's Face ID seems like a far-fetched scenario, especially when we're talking about ordinary everyday users. If we are still referring to high profile people then yes, there are reasons for someone to attempt to hack the device.

What do you think? Is Face ID secure and how much can it replace Touch ID? We are waiting for your opinion in the comments.