Video appears to show child bypassing Face ID to unlock his mother’s iPhone X

Apple’s iPhone has repeatedly popularized new methods to replace the password, swapping the passcode for fingerprints, and now, facial recognition. But does the iPhone X’s Face ID really offer users more security than Touch ID as Apple claims?

In a video uploaded to YouTube on Tuesday, a woman says her 10-year-old son, who resembles her, was able to unlock her iPhone X using Face ID. She said they discovered the hack unintentionally shortly after buying the phone. The video comes after Vietnamese cybersecurity firm Bkav claimed it was able to trick the technology with a $150 mask. The researchers said they were able to crack the security in less than a week after receiving their iPhone X on Nov. 5. And Joanna Stern, while reviewing the phone for The Wall Street Journal, found that identical triplets could unlock the same phone.

Apple declined to comment, but notes on its explainer of Face ID that while the chances of a stranger being able to unlock someone’s phone using the technology is 1 in 1,000,000 this statistical probability is different for twins, siblings, and other relatives. “If you’re concerned about this, we recommend using a passcode to authenticate,” the company says. As Andy Greenberg at Wired pointed out, it is also possible that in the cases of relatives being able to unlock each other’s phones they had inadvertently trained the technology to recognize both of their faces. But these experiments raise serious implications.

Apple’s AAPL, -1.09%   Face ID technology works using its “TrueDepth” camera system, invisibly projecting 30,000 invisible dots over a user’s face to create a 3D detailed mathematical model to verify their identity. The device can learn a user’s face and detect it even when its appearance and behavior changes. Users’ eyes have to be open and engaging with the device to unlock it, preventing the phone from being hacked by someone using a stolen photo.

The tech giant claims the technology has a false acceptance rate (FAR) of 1 per 1 million whereas Touch ID has a 1 per 50,000 FAR, making it about 20 times more difficult to spoof than Touch ID. The technology can accurately determine if an adversary is trying to use a picture or video of the victim, according to Bojan Simic, chief technology officer of HYPR, a decentralized biometric authentication company, due to its “liveness” detection which monitors facial movements to determine a person’s identity. “It looks like Apple has introduced a very effective and easy to use algorithm into the market,” he said.

Don’t miss: How to get Apple’s new iPhone for half price

Still, other experts are not convinced. “This is a high-risk move for Apple, especially in the wake of the Equifax breach,” Matt Schulz, the senior industry analyst at CreditCards.com, said. “That debacle has put data security front and center in people’s minds. If Apple’s facial recognition tool proves to be significantly flawed, it could really damage Apple’s hopes for Apple Pay expansion. People simply won’t use a payments tool if they don’t think it is safe.”

The security of facial recognition has been questioned in the past, largely due to the ability of others to scan someone’s face without their permission. In theory, this would make it easier for law enforcement to open a phone, as a face scan would not violate fifth amendment rights.

It can also be more difficult than other biometrics to capture a face image, according to a study from information security company the SANS Institute, and less user-friendly for people with darker skin tones. “Select Hispanic, black and Asian individuals can be more difficult to enroll and verify in some facial-scan systems because acquisition devices are not always optimized to acquire darker faces,” the SANS institute wrote.

Read also: Why Apple’s new iPhone is bad — for the environment

Apple reports to have overcome weaknesses in facial recognition in development, “but it remains to be seen how Face ID compares to Touch ID in practice for users,” Jason Chaikin, president of fingerprint sensor and biometric authentication company Vkansee — who obviously has a vested interest in fingerprint sensors — says facial recognition security comes down to a variety of factors, including resolution of image capture, brightness, 3D details. “Fingerprint is traditionally much more secure than face, and iris is traditionally even more secure than fingerprint,” he said.

In Apple’s case, it’s more likely users will be frustrated their phone is experiencing a false negative — locking them out of the device — than a false positive, mistaking someone else for them, Frances Zelazny, vice president of global cybersecurity startup BioCatch. One security method alone will always have its pros and cons, she added. Because of that, she suggests layered approaches, such as fingerprint scans for some apps and facial recognition for others.

Filed in: Top News Tags: 

You might like:

The Wall Street Journal: Whitefish halts Puerto Rico power repairs over $83 million in unpaid bills The Wall Street Journal: Whitefish halts Puerto Rico power repairs over $83 million in unpaid bills
NewsWatch: This chart on research productivity is bad news for the stock market NewsWatch: This chart on research productivity is bad news for the stock market
How to talk to your family about bitcoin at Thanksgiving dinner How to talk to your family about bitcoin at Thanksgiving dinner
Market Extra: Bitcoin breaks $8,000 milestone and keeps on rising Market Extra: Bitcoin breaks $8,000 milestone and keeps on rising
The Wall Street Journal: Justice Department sues AT&T, Time Warner over potential merger The Wall Street Journal: Justice Department sues AT&T, Time Warner over potential merger
The Wall Street Journal: Shares of Outback Steakhouse parent surge after Jana discloses large stake The Wall Street Journal: Shares of Outback Steakhouse parent surge after Jana discloses large stake
One major way U.S. credit-card debt is getting worse One major way U.S. credit-card debt is getting worse
Amazon’s sketchy health products could hurt its big pharmacy ambitions Amazon’s sketchy health products could hurt its big pharmacy ambitions

Leave a Reply

Submit Comment
© 2017 Stock Investors News. All rights reserved. XHTML / CSS Valid.