"Your face is your password": poten new phone tech problems?

[glenrobbo]

Having just seen a TV advert for some phone or other which has "face recognition" instead of keying in your password, this got be wondering what happens if you decide to shave off your beard or wear different glasses, clean off your make-up, have a stroke, or your name is Nicolas Cage or John Travolta?

Or you are one of a pair of identical twins?

Besides, couldn't anybody just scan a photo of the owner's face to get access?

[joshleb]

I'm pretty sure that the tech guru's have thought of these problems before you have...

Friend's iPhone X works well for him, even in low light conditions.

Also... where have you been for the last few years... not exactly new tech...

[glenrobbo]

joshleb said:

I'm pretty sure that the tech guru's have thought of these problems before you have...


Also... where have you been for the last few years... not exactly new tech...

I've been trying to grapple with those computer thingies but I keep forgetting the passwords.

[Mr E]

One of the reasons for the notch in an iPhone X is to house the hardware for face recognition.

It’s a bit more than just a visible light camera.

If you’re a security nerd, it should be pointed out that while you don’t have to divulge your pass code, they can just point your phone at your face.

[ging84]

I suggest you do a little reading about it, the technology is not perfect, but is capable of handling most of the scenarios you mention reasonably well.

[ST_Nuts]

Iphone X user here... Face recognition works brilliant - proper clever tech. Even works in darkness and some distance away.

Can even log into internet banking with face recog. and no password!

[glenrobbo]

I find that a bit scary.

[Cold]

My daughter has been issued an iPhone with face recognition tech for work. She tells me it's ok-ish. It struggles to realise it's her if she's got her "going out-out" make-up on.

There's a lesson there for all of us.

[Integroo]

Mine worked with a face mask on earlier. Though it's part facial recognition and part iris recognition.

[Sheetmaself]

I believe on the iPhone x at least it is infrared so doesn’t matter if dark or wearing sunglasses.

Just works for me, probably are security issues but i only have credit card details stored so (probably wrongly) not too fussed.

[cobra kid]

I've got it on my Huawei p20. A bit weird but works well.

I opted to stick with just fingerprint only. It works lightning fast so a quick tap and it's unlocked.

[HTP99]

I've got it on my Galaxy S9+, currently I'm sitting in bed, lights off, curtains drawn and I've just unlocked my phone by looking at it, it did take a few seconds though.

Personally I prefer using the rear fingerprint scanner as it's quicker.

[Sheepshanks]

Sheetmaself said:

I believe on the iPhone x at least it is infrared so doesn’t matter if dark or wearing sunglasses.

It’s a laser.

[IJWS15]

ST_Nuts said:

Iphone X user here... Face recognition works brilliant - proper clever tech. Even works in darkness and some distance away.

Can even log into internet banking with face recog. and no password!

A very good reason not to have one - the muggers don't just get your wallet and phone but the entire contents of your bank account!

Try proving it to the bank afterwards.

[Scrump]

It works fine on my Motorola as well. so definitely becoming common.
I recall reading that it had been fooled by using a photo of the users face with some particular contact lenses placed over the eyes, not sure whether to believe that or not.
Edit: It seems it was the Samsung iris recognition which was fooled:
https://www.independent.co.uk/life-style/gadgets-a...

Edited by Scrump on Monday 6th August 08:36

[durbster]

I think there was an early face recognition feature on my Galaxy S2 back in 2012. It's been around for a while but it has improved dramatically since then, and is much harder to fool.

The Windows Hello one on the Surface Books uses two cameras to create a 3D scan of your face, which is why it can't be fooled by a photo or video clip.

I'm sure I read once that the Windows Hello version includes a scanner that detects blood flow but I need to re-read that because now I'm typing it, it sounds unbelievable

[David A]

durbster said:

I think there was an early face recognition feature on my Galaxy S2 back in 2012. It's been around for a while but it has improved dramatically since then, and is much harder to fool.

The Windows Hello one on the Surface Books uses two cameras to create a 3D scan of your face, which is why it can't be fooled by a photo or video clip.

I'm sure I read once that the Windows Hello version includes a scanner that detects blood flow but I need to re-read that because now I'm typing it, it sounds unbelievable

Cash point in Brazil :

[HTP99]

Isn't it an iris scanner on the iPhone X, I think my S9+ has an iris scanner too but I've only set up the face scanner and fingerprint scanner.

[captain_cynic]

joshleb said:

I'm pretty sure that the tech guru's have thought of these problems before you have...

And most of us have reached the same conclusion.

1. They're fads and wont be around that long. Much like fingerprint readers on laptops in the early 00's, used to be everywhere, now almost nowhere.
2. These aren't security measures, they're gimmicks. Most MDM's will force a password/code.

I believe they've all already been broken, the fingerprint readers via a gummy bear and the face "unlock" via a picture (I believe they also used a contact lens).

When it comes to biometric security, you can either have effective security or ease of use, but not the two together.

Phones are the latter at the expense of the former. In order to make them usable to the average mouth breather they need to reduce the number of false negatives (you not being recognised) and do so by reducing the number of points of references required which in turn increases the chances of a false positive (someone or something not you being recognised).

If you want to secure your phone, a password/code is still the hardest to crack. For me, I don't bother even with a passcode, I treat my phone as inherently insecure and don't save passwords on it for anything important (banking et al.) In fact I don't save my internet banking password anywhere. I've also never lost a phone.

[ZesPak]

Have had phones with all sorts. Face recognition has come a long way in the past 8 years, but I still prefer fingerprint as the iPhone struggles with my sunglasses for example.

Most can't be fooled by pictures of the person in question.