3 ms·

So will these guys get the 1 million USD award?

• bdibs 7y ago
  That’s doubtful, they need the user to be there (and sleeping) for it to work.
  • votepaunchy 7y ago
    And if that isn’t enough, you have to put glasses on the face of the sleeping or unconscious victim.
    • dogma1138 7y ago
      That’s because glasses basically bypass the eyes/attention detection feature. If you don’t have that feature enabled you don’t need the glasses. That said it would be quite obvious that this attack vector would work, I don’t think that people just realized what happens when you put on glasses and train FaceID to unlock with them. It took like 10+ pin unlocks until FaceID comfortably recognized both my sun and reading glasses since I don’t wear either that much. If I never wore them it would likely mean that this would never work at all since there was no pin confirmed unlock which updates the model with glasses on.
• christoph 7y ago
  The $1m is for "Zero-click kernel code execution with persistence". Lock screen bypass is worth $100k.