This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Security researchers from the firm Bkav demonstrated a method to bypass Apple's Face ID biometric authentication system using a specially crafted mask. This event highlights a vulnerability in the facial recognition technology used for device security.
Vietnamese security firm Bkav created an improved mask to bypass Apple's Face ID
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Vulnerabilities that can be exploited in AI systems, software development toolchains, and hardware, resulting in unauthorized access, data and privacy breaches, or system manipulation causing unsafe outputs or behavior.
Also classified as
The Face ID system failed to perform robustly under spoofing attempts, failing to distinguish a static mask from a live face.
The incident involves a security vulnerability in Apple's Face ID AI system that allows unauthorized access to a device using a spoofed mask.
AI system
Due to a decision or action made by an AI system
Unintentional
Due to an unexpected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The vulnerability arose from the Face ID AI system's unintentional failure to correctly distinguish a composite mask from a living human face during post-deployment operation.
Security researchers demonstrated a vulnerability in Apple's Face ID by using a composite mask to bypass authentication. While showing limitations in commercial facial recognition AI, the national security impact is minor, as exploiting the vulnerability requires physical access to a specific device and highly customized physical spoofing materials.
Face ID operates independently to analyze facial features and make real-time authentication decisions using learned patterns from its neural network.
Minimal or No Risk: The Face ID system is a consumer biometric verification tool used for device security, which poses low or negligible risk to society at large.
The primary function of Apple's Face ID is to recognize and verify the user's face to unlock the device.
The reports are detailed, from multiple reputable tech journalism sources, describing the same proof-of-concept bypass by Bkav. While there was initial skepticism, subsequent videos and demonstrations confirmed the feasibility of the mask bypass under specific conditions.
Some experts argued it was a stunt rather than a practical real-world hack due to the extreme difficulty of scanning a target's face and creating a precise mask.
Technology
Liveness Detection Bypass
Static masks with 2D printed IR eyes successfully bypassed liveness detection.
Partial Face Scanning
AI algorithm only scans half of the face, making it easier to spoof with masks.
Adaptive Learning Flaw
Entering passcode after failed scans trains the AI to recognize the spoof face.
Data Inputs
Insufficient 3D Depth Data
AI accepted flat 2D printed eyes and lips mounted on a basic 3D frame.
Lack of Multi-Angle Scans
Face ID only uses a single portrait angle, unlike multi-angle solutions.
Underdeveloped Facial Data
Children's facial features are not distinct enough, causing false positives.
Human Factors
Passcode Sharing
Sharing passcodes allows the AI to retrain and accept unauthorized users.
Overreliance on Biometrics
Users assume Face ID is infallible, ignoring the secure passcode fallback.
Surreptitious Photo Capture
Target photos can be taken secretly to reconstruct a 3D model of the face.
Process and Methods
Inadequate Spoof Testing
Apple's testing with Hollywood masks missed cheaper composite spoof materials.
Lack of Coordinated Disclosure
Researchers did not share the bypass methodology with Apple before publishing.
Unverified Testing Methods
Initial bypass claims were published without independent third-party validation.
Management
Overstating Security Claims
Marketing hyped a one-in-a-million safety rate, creating false confidence.
Dismissing External Reports
Apple declined to comment on or publicly address the researchers' findings.
Rushed Product Release
Releasing the iPhone X early may have limited thorough security validation.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
