Freezing drizzle and icy travel conditions through Friday morning

MPR News helps you turn down the noise and build shared understanding. Turn up your support for this public resource and keep trusted journalism accessible to all. 

Turn Up Your Support

How Bkav tricked iPhone X's Face ID with a mask

Less than a week after the iPhone X release, a Vietnamese security firm says it has done what others couldn't — trick the phone's facial recognition software. How? One very creepy mask.

In a video released by the company Bkav, an employee unshrouds the mask, to which the phone apparently responds to by unlocking. "Face ID on this iPhone X is not as secure as Apple has announced," the employee says. The employee then unlocks the phone again with his own face.

, Bkav says it made the mask with two- and three-dimensional printers, silicone and "hand-made" skin to "trick Apple's AI."

The whole thing cost about $150, the company says.

 uses facial recognition rather than a passcode or fingerprint to unlock the phone. It can also be used to confirm identity to 

Of course, a feature like that has attracted a few skeptics.

, hiring a special effects makeup artist who spent 17 hours embedding thousands of eyebrow hairs with a needle — all of which failed to unlock the phone. The Wall Street Journal 

, and succeeded — but only by using 8-year-old identical triplets.

Apple would not comment on the video for this story. And NPR was not independently able to verify the claims.

When the iPhone X was unveiled in September, Apple marketing executive Philip Schiller said that 

 had developed a "neural engine" to process facial recognition that wouldn't "easily be spoofed by things like photographs," he said.

"They've even gone and worked with professional mask-makers and makeup artists in Hollywood to protect against these attempts to defeat Face ID. ... We require user attention to unlock. That means if your eyes are closed, you're looking away, it's not going to unlock," Schiller said at the time.

Schiller also put the odds of a random person being able to unlock your phone's Face ID at 1 in 1,000,000.

But Bkav, the security firm, said hacking Face ID wasn't as hard, pointing out that the software would recognize the owner's face even if half-covered.

"It means the recognition mechanism is not as strict as you think, Apple seems to rely too much on Face ID's AI. We just need a half face to create the mask," the firm asserted.

Bkav calls its hack proof of concept, "the purpose of which is to prove a principle."

Marc Rogers, a researcher at the security firm Cloudflare, 

 that if Bkav has indeed succeeded in hacking Face ID, the most surprising aspect would be the discovery that printed eyes could deceive it — no eye motion needed.

The magazine also notes that Bkav has a history of successfully breaking laptops' facial recognition tools with nothing more than 2-D images of a face.

Science

Crime, Law and Justice

A video shows the Vietnam-based Bkav apparently bypassing the feature. Apple has touted the function as secure since it was unveiled in September.

Security firm says extremely creepy mask cracks iPhone X's face ID

Go Deeper.

Like this?