Here’s What Security Experts Think About The iPhone X’s New Face ID Feature

Likes

Posted on: September 12, 2017

Posted by:

Josh Edelson / AFP / Getty Images

Of the smorgasbord of features stuffed into Apple's new thousand-dollar iPhone X, one of the most intriguing is Face ID — a new feature that lets you unlock your iPhone with your face, after the system has learned your facial features using Apple’s first-ever neural engine. “How do you unlock your phone with iPhone X?” asked Phil Schiller, Apple’s senior vice president of worldwide marketing, onstage at today’s iPhone event. “In the iPhone X, your phone is locked — until you look at it, and it recognizes you. Nothing has ever been simpler, more natural, and effortless.”

Here’s how it works: Apple deploys various sensors working in tandem to recognize your face in an instant, using what it calls the TrueDepth camera system. First, a dot projector beams more than 30,000 invisible dots onto your face to build a face map, while a “flood illuminator” helps confirm your face with what little light is available, even in the dark. Then an infrared camera reads the dot pattern and sends this information over to the secure A11 Bionic chip embedded in the iPhone X to process and confirm that your face is a match. The whole system works only when you look directly at the camera without closing your eyes or angling your face away. With Face ID, Apple says, your face becomes your secure password.

Apple claims Face ID is more secure than the previously used Touch ID in old iPhones — which Schiller said had become, before today, the “gold standard in consumer device biometric protection” — and even said there is only a one in a million chance for a nefarious actor to fool the system and break into your phone. Face ID learns your face and who you are, and adapts to you even if you wear glasses or grow a beard, the company says. And it isn’t tricked by photographs.

But how secure is Face ID? Security professionals and AI experts say it’s hard to know this early on. Still, that “one in a million” statistic Apple brags about? “It’s meaningless,” Matthew Green, a John Hopkins University cryptographer, told BuzzFeed News. “The threat with Face ID is that someone with a picture of your face might be able to fool the camera. We leave pictures everywhere.”

The threat of this happening is very real, as reports recently circulated that mere photographs could fool the facial recognition security feature in another new top-shelf phone, the Samsung Galaxy Note 8. Apple seems to be positioning itself as more secure, given the additional “depth sensing” capabilities it says live inside the new iPhone X (which confirms that your face is indeed three-dimensional, and not a flat photograph). But without any independent testing of the iPhone X conducted as of yet, it’s impossible to know this for sure.

Meanwhile, Bruce Schneier, an internet security expert and chief technology officer at IBM’s cybersecurity arm, said Apple’s “one in a million” failure claim may well hold up — but that it doesn’t matter if people are still able to break into your phone. “That’s why [security] professionals don’t unlock phones that way,” Schneier wrote to BuzzFeed News in an email.

‘Better than a security guard sitting at a desk’

The problem, according to Chris Nicholson, the CEO and founder of a deep learning startup called Skymind, is that it isn’t immediately clear whether Face ID is more secure than the Apple’s biometric Touch ID. But that doesn’t mean it’s useless. “It does introduce another factor” when you talk about the two-factor authentication of accounts and devices, Nicholson said. Even if a bad actor managed to fake one of your identifying “factors,” or passwords, it’s less likely that actor could fake multiple ones.

As Nicholson explained, AI is getting very good at recognizing faces nowadays — and it’s entirely believable Apple is deploying state-of-the-art technology in its devices. “Facial AI and deep learning is at the heart of computer vision, and AI can recognize people better than even people can,” Nicholson said. “In a sense, it’s even better than having a security guard sitting at a desk.”

But as others point out, Face ID will never be totally secure. What if a cop stops you and points the phone at your face, one Twitter user asked, while they have you in handcuffs — then he or she proceeds to look at your phone without a warrant?

This doesn’t exactly tread new territory, as security analyst Will Strafach, pointed out. “If someone were willing to violate the law and threatened you not to look down or close your eyes, then at that point the same could occur as with Touch ID — your finger could be pressed onto the sensor,” he told BuzzFeed News. “If it’s true that Face ID has a much lower false positive rate than Touch ID, Apple could update its security white paper and independent researchers would be able to confirm this.”

The Privacy Tradeoff

Bolstering that idea of security is the additional detail that Apple says authentication happens instantly on your phone using its new A11 Bionic chip, and that your information (i.e., your face) is never sent to the cloud. In fact, Apple has a long history of aggressively positioning itself as a company that is more privacy- and security-minded than its competitors — and that it is less interested in collecting user data, because it sells devices, not advertising. (As it turns out, this is also great PR for Apple.)

“This reflects Apple’s commitment to privacy, and I respect that,” Nicholson told BuzzFeed News. At the same time, he warned that this hampers Apple from building more powerful AI: “Apple isn’t allowing the data from all the users of its phone to go to a central AI brain and make the AI smarter. That makes everyone feel nice and safe, but it means Apple’s AI isn’t learning as fast as, say, Google” — which puts Apple at a disadvantage as the AI race heats up among tech giants.

Still, whether or not Face ID does have improved security, it doesn’t guard against one-off flukes of the feature failing onstage, as happened during the event on Tuesday. Apple has until October 27, when the iPhone X pre-orders begin, to address the issue.

Source: New feed

Related Products to this Post

Related Posts

Apple TV 4K hands-on: finally, no compromises

Likes Posted on: September 21, 2017

The Morning After: Monday, September 18th 2017

Likes Posted on: September 18, 2017

The best handheld vacuum

Likes Posted on: September 17, 2017

Google Earth VR gets new Street View images

Likes Posted on: September 15, 2017

Jaybird's Run earbuds go fully wire-free

Likes Posted on: September 14, 2017

Adobe taps your car for targeted ad data

Likes Posted on: September 11, 2017

The Morning After: Monday, September 11th 2017

Likes Posted on: September 11, 2017

The best smart pill dispenser (so far)

Likes Posted on: September 10, 2017

After Math: Perfidy!

Likes Posted on: September 10, 2017

Facebook's widening role in electing Trump

Likes Posted on: September 8, 2017

IBM is installing a Watson AI lab at MIT

Likes Posted on: September 7, 2017

The best compact washer and dryer

Likes Posted on: September 3, 2017

Ben Heck's smart bike, part 2

Likes Posted on: September 3, 2017

Here's all the big launches from IFA 2017

Likes Posted on: September 2, 2017

Google's iOS app now shows trending searches

Likes Posted on: September 1, 2017

Engadget Podcast Ep 40: This Is Your Night

Likes Posted on: September 1, 2017

The hits and misses of Gamescom 2017

Likes Posted on: August 28, 2017

The best cold-brew coffee maker

Likes Posted on: August 27, 2017

Ben Heck’s N64 Portable mod

Likes Posted on: August 27, 2017

Google Made A Test For Depression

Likes Posted on: August 24, 2017

The best ice cream maker

Likes Posted on: August 20, 2017

Ben Heck's 'IoT on Wheels'

Likes Posted on: August 20, 2017

The three TVs that made our buyer's guide

Likes Posted on: August 19, 2017

D&D's revamped RPG companion site is live

Likes Posted on: August 15, 2017

The best sous vide machine and gear

Likes Posted on: August 13, 2017

Vizio TVs add the Google Play video app

Likes Posted on: August 12, 2017

The best essential oil diffuser

Likes Posted on: August 6, 2017