3 ms·

Apple could add eye movement to it's algorithm tomorrow and this attack would fail forever.

• Arnt 9y ago
  Oh sure. Unreleased vapourware beats all attacks.
  • valuearb 9y ago
    Isn't this attack "unreleased vaporware"? For example, you have to use FaceID every 4 hours or it requires a passcode. Do you think they were able to hand make an acceptable mask within 4 hours?
    • detaro 9y ago
      Do they have to start making the mask after obtaining the phone?
    • Arnt 9y ago
      It's not vapourware: It may be a lie, but it's not a promise of greatness in some future version. They're saying "we have carried out an attack", not "we will attack oh-so-well". Regarding the four-hour limit, the attacker have to either cheat and start making the mask in advance, or practise making masks quickly. Neither seems impossible. But of course, Apple could (and IMO would) improve the defense. I'm sure Apple would think of ways to counter any publicly known attack.