Researchers have discovered an error in Apple's Face ID that allows users to bypass protection using modified glasses. The process is not straightforward, but it does work.
Apple replaces it with Face ID by avoiding the fingerprint scanner (Touch ID) with the iPhone X. Apple has always billed Face ID for being more secure than Touch ID. And while bypassing biometric protection is not easy, it is possible. Security researchers at the 2019 Black Hat Conference have revealed a potential flaw in facial biometrics.
Apple replaces it with Face ID by avoiding the fingerprint scanner (Touch ID) with the iPhone X. Apple has always billed Face ID for being more secure than Touch ID. And while bypassing biometric protection is not easy, it is possible. Security researchers at the 2019 Black Hat Conference have revealed a potential flaw in facial biometrics.
How researchers bypassed Face ID
According to researchers, one can use modified glasses to bypass the biometric protection medium. "By carefully tapping only a pair of glasses on the lens and placing it on the victim's face, the researchers proved how they could bypass Apple's FaceID in a particular scene. The attack itself has to understand how to put glasses on an unconscious victim without being awakened without giving it a tough, bad actor, "the ThreatPost reports.
The researchers took the 'liveness' feature of the system. Detects if a person is looking at the device. "They have discovered that the abstraction of the eye for the detection of animals provides a white dot (iris) above a black region. And they have discovered that if a user is wearing glasses, live detection results in a change of eye. "
Then they demonstrated this by making modified glasses using white and black tape. In the demo, researchers have shown how to transfer money using security and mobile payments. Apple, in a support document, explained that Face ID was designed to avoid designed by masks and other techniques. It uses neural networks to achieve this. As an extra layer of security, Apple also has an attention-aware feature.
How companies can tighten the security
Researchers have found a way to bypass facial biometrics, but absorption can be stopped very easily. In terms of mitigation, researchers suggest manufacturers add identity authentication to domestic cameras. They suggest increasing the "weight of video and audio synthesis detection".
0 Comments