Bypassing Apple FaceID's Liveness Detection Feature

Schneier on Security

Security / Schneier on Security 139 Views 0

Apple's FaceID has a liveness detection function, which prevents somebody from unlocking a victim's telephone by putting it in entrance of his face while he's sleeping. That function has been hacked:

Researchers on Wednesday during Black Hat USA 2019 demonstrated an assault that allowed them to bypass a victim's FaceID and log into their telephone simply by putting a pair of modified glasses on their face. By merely putting tape rigorously over the lenses of a pair glasses and putting them on the sufferer's face the researchers demonstrated how they might bypass Apple's FaceID in a selected state of affairs. The assault itself is troublesome, given the dangerous actor would wish to determine learn how to put the glasses on an unconscious sufferer with out waking them up.