Jump to content
Floatplane payments are migrating! Read more... ×
Phishing Emails - Fake Giveaway Read more... ×
Search In
  • More options...
Find results that contain...
Find results in...
Bouzoo

Out of 110 tested phones, 42 were unlocked while using photos on face recognition

Recommended Posts

1 hour ago, Bouzoo said:

Intelligent scan is iris/face recognition combo. 

So they just need to steal your head.


My Rig:

-i7 7700k @ 4.8 Ghz, delid

-ASRock Z270-ITX/ac mobo 

-16GB G.Skill Ripjaws V @ 3000Mhz

-RX 580 Sapphire Nitro+

-240 AIO, Celsius S24

-Crucial MX300 525GB, 2TB HDD

-Fractal Design Define Nano S

-650 80+ Gold semi modular from EVGA

-1080p 75Hz dell monitor

Link to post
Share on other sites

I always said fingerprints are a bad idea. You're literally leaving keys to unlock on a device itself! But ok, whatever, lets assume regular opportunistic crooks that might get your phone in their hands won't be able to do it. But face unlock, every idiot can dig your photo from somewhere and just point a phone at the screen.

Here I'll have to give praise to Apple for "overdoing" the feature and having actual 3D scanner for face unlock, meaning you actually need an actual face and not just flat image.

Link to post
Share on other sites
Posted · Original PosterOP
9 minutes ago, peanuts104 said:

So they just need to steal your head.

Or your eyeball. Whatever works for you. 


The ability to google properly is a skill of its own. 

Link to post
Share on other sites
4 minutes ago, RejZoR said:

I always said fingerprints are a bad idea. You're literally leaving keys to unlock on a device itself! But ok, whatever, lets assume regular opportunistic crooks that might get your phone in their hands won't be able to do it. But face unlock, every idiot can dig your photo from somewhere and just point a phone at the screen.

Just out of curiousity, if you don't want to use fingerprint or facial scanning what security method would you prefer? Codes, patterns or full passwords? I personally found fingerprint scanning to be secure and convenient.

2 minutes ago, Bouzoo said:

Or your eyeball. Whatever works for you. 

But isn't that specific to Iris Scanning technology? So Samsung where using that technology at some stage. Not all the phones tested in the original article used iris but rather facial.

Link to post
Share on other sites
Posted · Original PosterOP
2 minutes ago, ZacoAttaco said:

But isn't that specific to Iris Scanning technology? So Samsung where using that technology at some stage. Not all the phones tested in the original article used iris but rather facial.

Yes, specific to Iris. I mean, I am sure it will work only with the eyeball, you just need to get proper light for it. We've gone dark man. 


The ability to google properly is a skill of its own. 

Link to post
Share on other sites
2 hours ago, BuckGup said:

Not really shocking considering things that just use a camera don't know depth so a picture and a face are the same. Interesting that people flip out when they fool the iPhone with customized expensive handmade masks yet 42 other phones fail from just downloading a picture off facebook and holding it up

Double standards are a favorite among most people.  


Laptop: 2016 13" nTB MacBook Pro Core i5 | Phone: iPhone 6s Plus 64GB Wearables: Apple Watch Sport Series 2 CPU: i5 4690k | Mobo: Gigabyte Z97-N WI-FI | RAM: 8GB Ballistix Sport | GPU: Sapphire Nitro+ RX 580 4GB | Case: Apple PowerMac G5 | OS: Win 10 | Storage: 480GB PNY SSD & 2TB WD Green HDD | PSU: Corsair CX600M | Display: Dell UZ2215H 21.5" 1080p, ViewSonic VX2450wm-LED 23.6" 1080p, Samsung SyncMaster 940BX 19" 1024p | Cooling: Corsair H55 AiO | Keyboard: G610 Orion Cherry MX Brown | Mouse: G303 | Audio: Audio Technica ATH-M50X & Blue Snowball

 

Link to post
Share on other sites
1 minute ago, Bouzoo said:

Yes, specific to Iris. I mean, I am sure it will work only with the eyeball, you just need to get proper light for it. We've gone dark man. 

Fair enough, ok if you can get me the eyeball then I'll try it. 😂

Link to post
Share on other sites

The funny thing is that most anyone who understands how face recognition works could see this coming.  You need hardware that recognizes presence to have truly secure recognition.  Anyone else is really just looking at the 2D image and saying "yep, close enough," which makes it trivial to fool them with a photo

 

The problem is that many Android vendors don't properly convey that.  They just advertise "unlock your phone with your face!" and don't tell you that it's not nearly as secure as what you find on iPhones and a few high-end Android phones.

Link to post
Share on other sites
1 hour ago, ZacoAttaco said:

Just out of curiousity, if you don't want to use fingerprint or facial scanning what security method would you prefer? Codes, patterns or full passwords? I personally found fingerprint scanning to be secure and convenient.

But isn't that specific to Iris Scanning technology? So Samsung where using that technology at some stage. Not all the phones tested in the original article used iris but rather facial.

PIN or pattern. Passwords are just too complex to be used for every unlock, makes it impractical. One way would be for all this "Ai" companies like to throw around to figure out whether it's a live snapshot or a static photo in a brief of a second. If it's too static, block login.

Link to post
Share on other sites

Recently someone made claims to be able to beat the iPhone X (but not xr, xs) face recognition, and were to give a presentation on it at a conference in Singapore. Was cancelled after their employer said that it was premature and not fully tested yet.

 

Quote

China-based researcher Wish Wu was scheduled to present a talk entitled “Bypass Strong Face ID: Everyone Can Deceive Depth and IR Camera and Algorithms” at the Black Hat Asia hacking conference in Singapore in March. Wu told Reuters that his employer, Ant Financial, asked him to withdraw the talk from Black Hat, one of the largest and most prestigious organizers of hacking conferences.

Ant Financial’s Alipay payment system is compatible with facial recognition technologies including Face ID.

 

Quote

Wu told Reuters that he agreed with the decision to withdraw his talk, saying he was only able to reproduce hacks on iPhone X under certain conditions, but that it did not work with iPhone XS and XS Max.

“In order to ensure the credibility and maturity of the research results, we decided to cancel the speech,” he told Reuters in a message on Twitter.

https://www.reuters.com/article/us-apple-cyber-conference/cyber-researcher-pulls-public-talk-on-hacking-apples-face-id-idUSKCN1OX1TA


CPU: Intel i7 6700k  | Motherboard: Gigabyte Z170x Gaming 5 | RAM: 2x8GB 3000MHz G.Skill Ripjaws 5 | GPU: Gigabyte Aorus GTX 1080ti | PSU: Corsair RM750x (2018) | Case: BeQuiet SilentBase 800 | Cooler: Corsair H100i AIO | SSD: Samsung 970 Evo 500GB + Samsung 840 500GB | HDD: Seagate Ironwolf 8TB + 2x Seagate Ironwolf 6TB | Monitor: Acer Predator XB271HU + Samsung BX2450

Link to post
Share on other sites

So it's either having something that's fooled by a photo or something that requires an intricately developed mask to fool. 

 

Yeah, I'd take the latter. I doubt any old thief would be so desperate to the point where they would have to mould a mask. 


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites

Tried on my own honor 10 and couldnt get it to unlock with quite a few pictures at various qualities which is good i guess.


cpu: intel i5 4670k @ 4.5ghz Ram: G skill ares 2x4gb 2166mhz cl10 Gpu: GTX 680 liquid cooled cpu cooler: Raijintek ereboss Mobo: gigabyte z87x ud5h psu: cm gx650 bronze Case: Zalman Z9 plus


Listen if you care.

Cpu: intel i7 4770k @ 4.2ghz Ram: G skill  ripjaws 2x4gb Gpu: nvidia gtx 970 cpu cooler: akasa venom voodoo Mobo: G1.Sniper Z6 Psu: XFX proseries 650w Case: Zalman H1

Link to post
Share on other sites
18 hours ago, Bouzoo said:

This is why I honestly like Samsungs Intelligent scan. I still believe it is the most secure if you opt for biometrics.

Er, did you see your list? 5 out of 23 Samsungs failed the test. I'd rather not put my bet on those that passed either... To argue that it's the MOST secure won't make sense if I had to pitch this to my IT head.

Link to post
Share on other sites
4 minutes ago, Tenelia said:

Er, did you see your list? 5 out of 23 Samsungs failed the test. I'd rather not put my bet on those that passed either... To argue that it's the MOST secure won't make sense if I had to pitch this to my IT head.

Correct me if I'm wrong but they were some of Samsungs' older and more budget orientated models. I think the newer flagship models have far superior biometrics.

Link to post
Share on other sites
Posted · Original PosterOP
23 minutes ago, Tenelia said:

Er, did you see your list? 5 out of 23 Samsungs failed the test. I'd rather not put my bet on those that passed either... To argue that it's the MOST secure won't make sense if I had to pitch this to my IT head.

Iirc only flagships have intelligent scan and they passed, i.e. S9 and Note9. 

By that logic you can choose to not believe any phone even if they passed. It's like you expect same protection on a $300 and $800 phone. 


The ability to google properly is a skill of its own. 

Link to post
Share on other sites
3 minutes ago, IceCold008 said:

What about fingerprint recognition.?

 

Has anyone tested the phones which have that installed?.

 

 

I'd imagine it a bit more complicated to trick a fingerprint scanner as you would need a scan of the fingerprint itself (slightly harder than a picture of someone), and then you would probably need some form of high quality printer to print it on some kind of material that can transmit electrical signals and heat effectively enough to make it think there's a finger there.

 

Of course that's assuming the fingerprint scanner is competently done -- but I'd expect that to be more likely than a competent facial recognition system.


PSU Tier List | CoC

Gaming Build | FreeNAS Server

Spoiler

i5-4690k || Seidon 240m || GTX780 ACX || MSI Z97s SLI Plus || 8GB 2400mhz || 250GB 840 Evo || 1TB WD Blue || H440 (Black/Blue) || Windows 10 Pro || Dell P2414H & BenQ XL2411Z || Ducky Shine Mini || Logitech G502 Proteus Core

Spoiler

FreeNAS 9.3 - Stable || Xeon E3 1230v2 || Supermicro X9SCM-F || 32GB Crucial ECC DDR3 || 3x4TB WD Red (JBOD) || SYBA SI-PEX40064 sata controller || Corsair CX500m || NZXT Source 210.

Link to post
Share on other sites

Yeah quite expected. Kinda lame when it's lt made properly but half assed just to say it has the feature. Though I wouldn't use it, fingerprint and just a regular pattern. 

Link to post
Share on other sites

Blackberry failing is really disappointing, they should reevaluate their marketing after this. Good to see the One Plus models passed, I might be getting one soon. Too bad they didn't test any Windows Phones, would have liked to see how the Lumia 950 and the HP Elite faired.

Link to post
Share on other sites

I'm not surprised, because all these brands took a "let's just copy Apple" approach to making facial recognition.   I have a low opinion of these mid tier Android phones because they're all the same damn thing with a different logo on the front, and Mr. Chen don't know what the fuck he's doing.  Even on an Apple phone I'd rather have TouchID than FaceID.


Workstation: 8600k @ 4.6Ghz || ASRock Z390 Taichi Ultimate || Gigabyte 1080Ti || G.Skill DDR4-3800 @ 2666 4x8GB || Corsair AX1500i || 25 gallon whole-house loop.

HTPC/GuestGamingBox: Optoma HD142X 1080p Projector || 7600K@ 4.6 || Gigabyte Z270 Gaming 9  || EVGA Titan X (Maxwell) || Corsair RM650x || CPU+GPU watercooled 280 rad pull only.

Server Router (Untangle): 8350K @ 4.5Ghz || ASRock Z370 ITX || 2x8GB || EVGA G3 750W || CPU watercooled, 25 gallon whole-house loop.

Server VM/Plex/HTTPS: E5-2699v4 (22 core!) || Asus X99m WS || GT 630 || Corsair RM650x || CPU watercooled, 25 gallon whole-house loop.

Server Storage: Pent. G3220 || Z87 Gryphon mATX || || LSI 9280i + Adaptec + Intel Expander || 4x10TB Seagate Enterprise Raid 6, 3x8TB Seagate Archive Backup, Corsair AX1200i (drives) Corsair RM450 (machine) || CPU watercooled, 25 gallon whole-house loop.

On the Shelf: EVGA X99 micro2, 780, 740 GT, 210 w/ DVI port unsoldered (Hint: it can be done but it ain't easy). 

Laptop: HP Elitebook 840 G3 (Intel 8350U).

Link to post
Share on other sites

If you need any help with translation, let me know

 

Ik spreek namelijk vloeiend Nederlands


PSU TIER LIST 3.0//Vram info//80+ info//HDD Guide//Build logs//Build plan guide//Before troubleshoot//Mark Solved//Off Topic//Community standards

Don't forget to quote or mention me

 

Primary PC: Random stuff inside a case

CPU: I5-8600k  @4.5 ghz  GPU: GTX 1070 ti EVGA SC Gaming   RAM: 8+8 3360 mhz DDR4 Trident Z   MOBO: MSI Gaming Pro Carbon AC   HDD: 1 TB 7200 RPM Seagate Baracudda, 1 TB 5400 RPM Samsung ECOGREEN   SSD: Samsung 860 EVO 500 GB   Soundcard: built in   Case: Cooler Master Masterbox Lite 5 RGB   Screen: Salora 40LED1500

 

Second PC: Cedar mill v2

CPU: i3-2130   GPU: Intel HD graphics   RAM: 4+2 GB 1333 mhz DDR3    MOBO: HP H series   HDD: 320 GB WD Black 7200 RPM, 4x 1tb 5400 RPM Samsung Ecogreen   PSU: HP 250 watt   Soundcard: built in   Case: Some premium 2003 case   Screen: IIyama Prolite T2240MTS, Samsung SyncMaster710N

 

Laptop : Acer TravelMate 8573t

CPU: I3-2330M   GPU: Intel HD graphics   RAM: 4+2 GB 1333 mhz DDR3   MOBO: Acer   SSD: 250 gb mx500 sata   Soundcard: built in   Case: alluminium/metal   Screen: TN 768p

 

Game consoles:

PS4 slim glacier white 500 gb, PS4 FTP Special Edition 500 gb, Xbox, 3 DS lites, DSI XL, Gameboy Advanced Color, PS Vita v2, Wii, PS3 500 gb

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×