4 ms·

CCC hack of face id arriving in 5..4..3...

• sloreti 9y ago
  Face data is never sent to server, stored on device.
  • davrosthedalek 9y ago
    True, but your face data is also saved on any photo anybody might have of you. It's not that hard to generate a 3d model from that.
    • theshrike79 9y ago
      "not that hard" to whom? A state operator doing a targeted attack, most likely not. Local police? No fucking way. Random phone thief? Don't make me laugh. And people seem to actively "forget" that this is a learning model, getting better with every unlock. Just like TouchID, but better.
    • saagarjha 9y ago
      They talked about how masks can't fool it, so I'd expect that a 3D model won't either.
      • davrosthedalek 9y ago
        They (ok, a different they) also said that the iris scan can not be fooled, and how long did that last?
  • jojoo 9y ago
    the hack will be to unlock the i-phone with a photo or some probe. i'd guess starbuck will need less than 5 days.
    • UncleMeat 9y ago
      Of course it's easy. But it's a severe threat model. Targeted physical attacks aren't really on the list of concerns for most people. And if you are worried about it, you shouldn't be using touch or voice unlock either.
      • smogcutter 9y ago
        Targeted physical attacks are a bigger concern than people often assume - think abusive relationships. It sounds like this in some ways is a step forward from touch id in that regard, but we'll have to see.
    • gdilla 9y ago
      Presumable the IR sensor will know that your photo or replica is not body temperature. That said, maybe heating up your fake with a hair dryer will work?
• davrosthedalek 9y ago
  Why the downvote? All of these system have been proved easy to trick. Do you really think depth perception is a real hurdle? 3d printers do exist. It is based on IR detection of projected points, so you might even be able to fake it with a specially prepared photo (for example with holes for the ir points) and an ir source behind it.
  • craigyk 9y ago
    You could be right, but it seems to me there is a lot of data going into that thing, if it is designed to not just check the data for matches, but also self-consistency across inputs it could be a pretty high bar... I imagine it does depth, IR temp checking (nose colder than face, etc.), image, and maybe even a couple ms of time monitoring to make sure the face is pliable and maybe even has realistic deformability.
    • davrosthedalek 9y ago
      I didn't hear the live stream audio. Did they announce anything in that direction?
      • craigyk 9y ago
        Just a guess from the types of sensors and the custom ASIC that was designed to integrate them... at 600 billion operations per second it certainly seems like it would be capable of real-time integration and validation of all those things.
        • davrosthedalek 9y ago
          I wonder if the ir camera could be used for other purposes. If it can actually read the temperature, that's a neat trick. Probably can't though (see prices of flir lepton), I'd guess it is a b/w camera sensitive in the 700-800 nm range. But still, with the dot projector, and that kind of processing power, they should be able to detect 3d gestures, similar to leap motion.
  • 9y ago