3 ms·
Troy Hunt already posted about this [1]. I think this quote is fitting: "More than anything though, we need to remember that Face ID introduces another securi
by pasta 9y ago
Troy Hunt already posted about this [1].
I think this quote is fitting:
"More than anything though, we need to remember that Face ID introduces another security model with its own upsides and downsides on both security and usability. It's not "less secure than a PIN", it's differently secure and the trick now is in individuals choosing the auth model that's right for them."
[1] https://www.troyhunt.com/face-id-touch-id-pins-no-id-and-pragmatic-security/ https://www.troyhunt.com/face-id-touch-id-pins-no-id-and-pra...
- scribu 9y agoFrom Troy Hunt's article: > given the processing power to actually observe and interpret eye movements in the split second within which you expect this to work, this would be a really neat failsafe. Apple highlights this as "attention awareness" Yes, it would be a great failsafe. However, if the PoC demonstrated by Bkav is legit, it would seem that Face ID doesn't look for eye movement; it just checks if the eyes are oriented toward the device. That said, I agree that regular people probably don't need to worry about any of this.
- jkubicek 9y agoYou can also turn attention awareness off. They didn’t specifically mention whether they turned it off or left it on.
- dkonofalski 9y agoAccording to tweets from Wired, the attention features were disabled when they initially observed the test. There were also questions that they asked that the Bkav team refused to answer.
- azinman2 9y agoOr maybe it does check, but the mask puts it in some kind of error recovery mode.