5 ms·
How to hack FaceID: You'll need: 1. 2 phones (at least 1 with an IR camera, such as another Iphone X) 2. a helper app 3. access to 10+ photos of the victim
by randyrand 9y ago
How to hack FaceID:
You'll need:
1. 2 phones (at least 1 with an IR camera, such as another Iphone X)
2. a helper app
3. access to 10+ photos of the victim (Facebook typically)
4. a small mirror
With the helper app:
1. capture the suspect's phone's unique IR dot pattern by shining their phone at white piece of paper, recording it with the helper app (the helper phone needs an IR camera of course, such as another Iphone X)
2. makes 3d model of persons face from the FB pictures
3. generates 2 animated videos of their face, 1 just a normal color video and another with the dot pattern applied
4. now you need to show the 2 videos to FaceID, using the mirror to show the correct video the the corresponding camera
- tspike 9y agoThey tested it against lifelike face masks, I doubt that would work, fortunately. They mentioned an IR camera, wouldn't be surprised if they're checking temperature as well.
- randyrand 9y agoPeople misunderstood what the static face masks were for. The static face masks were not for testing against a face-mask attack. They were for testing FaceID. As far as testing goes, the mask was assumed to be a stand-in for the real person.
- macintux 9y agoCitation?
- randyrand 9y ago2 years of work experience with Primesense 3d cameras. I'm well aware of what they are capable of. That said, they could use the color video feed to require subtle eye movements which would make this attack harder.
- wiremine 9y agoYeah, that's doesn't seem to jive with how they described it on stage...
- randyrand 9y agoI re watched the video, and you're right. They said they used the masks to help prevent against mask attacks. To the extent that it worked, we don't know. Since I am very familiar with the tech, I know that IR light does not have any special properties in detecting a mask vs human skin. But I assume the nueral network they trained looks for movement of some sort.
- haikuginger 9y ago> Since I am very familiar with the tech, I know that IR light does not have any special properties in detecting a mask vs human skin. Since you're familiar with the tech, you'll be aware that humans, who are alive, emit IR light which can be picked up by an IR camera, and a mask, which is not, does not.
- detaro 9y ago"IR" as in the heat coming of a human body is very different from "IR light" that is used in setups like this. Just like a cheap phone camera might be able to see the IR from a TV remote, but can't see body heat. And even if it could, heating a mask to body temperature isn't all that difficult.
- MBCook 9y agoWe don't know that yet. We'll find out more when they release the white paper and people get their hands on them.
- deleted 9y ago[deleted]
- whipoodle 9y agoCome on.
- valuearb 9y agoLOL, this doesn't make a lick of sense. You are going to display a 2D video to a system that takes 3D measurements?
- randyrand 9y agoThe dots are how the 3-D measurements are taken. the ir dot video would spoof the 3d measurements. look into how primesense 3d cameras work.