The Vietnamese company from the field of cyber security Bkav claims that it managed to “deceive” the Face ID function in the iPhone X using a special mask. It looks like the head of a mummy with cutouts for the eyes, nose and mouth and misleads the system of creating depth maps of Apple.
Bkav says that the mask is created using a popular 3D printer, two-dimensional images and makeup. Also, “special treatment in the area of the cheeks and around the face” was done, where the skin is larger than in other places. The nose, in turn, is made by hand from silicone, so that its shape can be easily changed if necessary (which was required during the experiment). The video below shows how a researcher unlocks the iPhone X first using his face, and then using a mask.
The company began working on the mask on November 5, right after it received a new Apple smartphone. To circumvent the protection of Face ID, the Vietnamese researchers took less than a week. They recognize that the technology requires a detailed scan of the face of the user of the iPhone X. The cost of producing one “fake person” is $ 150, which is relatively inexpensive.
The company notes that the mask still needs to be modified. “Leaders of countries, leaders of large corporations … should be aware of the problem, as their devices may well try to crack,” Bkav writes on his website. “This is a difficult task for ordinary users, but simple for professionals.”
A few weeks ago, Apple explained in detail about the technologies that lie at the base of Face ID. The company wrote that the iPhone X uses a neural network that “protects against attempts to unlock your phone with photos and masks.” Wired and The Wall Street Journal previously made silicone masks, but could not mislead Face ID.
When asked why the Bkav method worked, and other attempts to crack Face ID’s security failed, the Vietnamese replied: “Because … we are the leading company in the field of cybersecurity;) It is difficult enough to make the” right “mask without certain knowledge. We, as already mentioned, managed to circle Apple’s AI, because they understood how this AI works and how to get around it. In 2008, we first showed that face recognition is not an effective measure for protecting laptops. ”
According to the Cupertino company, masks created by professionals were used to train the neural network. However, according to official data, with probability one to one million, an accidental person can still crack Face ID.
source: The Verge