Just a couple of days ago, we talked about how a security research team managed to crack Apple’s FaceID using $150 worth of materials to build custom masks. Now, it seems it might be possible to do that with exactly zero cash investment.
In a YouTube clip, a ten-year-old named Ammar Malik demonstrates how he managed to unlock his mother’s iPhone X using nothing but… his own face.
The idea behind the iPhone X’s biometric security is that it maps a user’s facial topography to make the device more secure. However, the company has also said it might be possible for family members who share features to unlock each other’s iPhones this way. It’s something that’s not really possible to protect against, given that FaceID is expected to learn to understand your different looks over time.
Usually, that means twins can unlock each others’ phones. In this case, a 10-year-old boy was able to unlock an iPhone X secured with his mother’s features. That drastically brings down Apple’s claims of FaceID goofing up only about one in a million instances.
To be clear, Ammar was also able to unlock his father’s device, according to Wired, but only once. As for his mother Sana Sherwani’s phone, he wasn’t able to unlock the device after she reset FaceID in better lighting. Once she reset it a second time in low light, he was able to unlock the iPhone again.
Unfortunately, this isn’t something Apple can patch out either. Family members are going to share some features with relatives on occasion. Attempting to fix that would probably compromise on FaceID’s ability to match you in various lighting scenes and looks.
So if you’re worried your kid might be sneaking into your iPhone X, it’s probably best to stick to a passcode.