> Face ID uses projection mapping and infrared photography to establish depth It seems to me that this "just" expands the parameter space as a way to make defe

> Face ID uses projection mapping and infrared photography to establish depth It seems to me that this "just" expands the parameter space as a way to make defeating the algorithm much harder. I don't see how, in principle, that makes Face ID invulnerable to this type of attack. Given that Face ID is only accessible using Apple devices which lock-up after a number of failed attempts, training a sufficiently sophisticated GAN might be problematic. But a motivated attacker might, for example, use a device farm or a reverse-engineered implementation of Face ID.