Considering this "challenge accepted" Vietnamese tech security firm Bkav have applied 3D printing, silicone molding and handmade design to develop a mask that claims to successfully trick FaceID into unlocking any iPhone X. Face ID was configured with a real person's face and that the mask was able to fool it.
Paul Norris, senior systems engineer for EMEA at Tripwire, pointed out via email that Bkav also hasn't said how much tweaking was necessary before it got the mask to work; if the attempt was not immediately successful, it makes the chances of a successful attack very low indeed. Bkav did not respond to a request to further explain its methodologies.
When Samsung introduced the Note 8 with its $960 price tag, we knew about Apple's new iPhone X, which will cross the borderline of Samsung with the pricing policy.
According to details posted on Bkav's website: The mask is crafted by combining 3D printing with makeup and 2D images. "These are actual masks used by the engineering team to train the neural network to protect against them in Face ID".
"Potential targets shall not be regular users, but billionaires, leaders of major corporations, nations' leaders, and agents like Federal Bureau of Investigation need to understand the Face ID's issue", the company's researchers said.
It took them around a week's time, after they got their iPhone X on November 5, to come with their version of the Face ID bypass.
Bkav's method claims to use both 2D images and masks, two tactics that Apple seems pretty confident that Face ID can defend against.
Apple has claimed that its Face ID - which replaces fingerprint scanner Touch ID from its earlier models - is super secure. A user's passcode or password must be entered after any restart, if 48 hours have elapsed since the device unlocked or if there have been more than five unrecognized access attempts in a row.
The researchers also don't expect such a technique to be used against the everyday iPhone X user. In fact, during the iPhone X launch event at the Steve Jobs Center, Tim Cook even joked that unless an iPhone X user has an evil twin, he will have no reason to worry about his security.
An attendee uses the Face ID function on the new iPhone X during a presentation for the media in Beijing, China October 31, 2017. "And until all of these wrinkles are out of biometrics, we have the problem that once copied, unlike passwords, you can't change it". Of those measures was lowering the internal specifications for its Face ID components.