Just a couple of weeks ago, a Vietnamese cybersecurity firm Bkav was reported to have fooled Face ID on iPhone X with a cheap mask, and now it has repeated the same trick even more convincingly.
With a mask apparently built for about $200 using materials like a 3D printer and stone powder – which most people can easily obtain – the researcher shot a video unlocking the iPhone X with the mask.
But this time around the firm also showed the individual who the mask was based on enrolling in the Face ID, so you can put your mind at rest that the mask was not enrolled as the primary user.
The firm also enabled the attention detection feature, which is designed to make sure the user is looking at the phone before being able to unlock it.
It flawlessly unlocked twice in a row for the mask, which is worrying and indeed the cybersecurity firm Bkav reckons that base on this, users should not use Face ID to secure any sensitive data or business transactions.
Fooling Face ID on iPhone X still doesn’t sound easy
How much of a risk this really posed? Bkav explains that to make a 3D model of a person’s face would require taking photos of them secretly when they enter a room containing a pre-setup system of cameras located at different angles.
Then you would need to process the photos using algorithms, and then you would need to 3D print the mask. Of course, as well as gaining access to the user’s phone.
That doesn’t sound like what a typical thief would want to do because it requires a lot of processes. So unless you have sensitive information on your phone (iPhone X) we wouldn’t think you should worry about it.