Questions not answered about Bkav's Face ID test

International technology sites raised many questions after Bkav released a video claiming to overcome the security of face on iPhone X.

Arstechnica technology site said that "Bkav's videos and reports have ignored important details for other researchers to assess whether Bkav has actually overcome the authentication system that Apple has spent many years developing. ".

Picture 1 of Questions not answered about Bkav's Face ID test
Mask structure Bkav used to fool Face ID iPhone X. (Photo: Bkav) .

This famous technology page said: "One of the most important details is whether the mask was successful in the first trial attempt," because according to Apple, Face ID will "learn" the data according to time. "If Bkav" teaches "Face ID to identify masks, they have experimented in situations where reality is unlikely ", Arstechnica said.

Cnet reported cautiously: "Face ID of iPhone X is said to have been hacked. We have some questions . " The question posed by this technology site is what Bkav registered with Face ID on the iPhone X they tested? "Bkav did not show people how the process they conducted and this is clearly a non-transparent point , " Cnet wrote.

Experts continue to focus on how Bkav experimented in videos posted on YouTube."If Face ID tries to fail in five times, it will force the password to be entered. If Face ID does not recognize the owner and then uses the passcode again to open the device, the device can capture new images to ' learn 'add data' , Cnet writes.

This page also poses the situation that "it is possible that Bkav has tried the mask a lot of times five times, then they enter the passcode, this time the machine scanned the mask and understood that it is the owner to identify in the next time according to the". Bkav claims that the test is "without a passcode" but this is not an easy task.


Bkav videos claim to deceive Face ID.(Source: Bkav).

Vietnamese technology company said it began testing on November 5, after they received the iPhone X. However, they did not claim how much time it took to make that face. This is very important because Apple's security features are quite strict.

If Face ID on iPhone X is not used within 48 hours, it will require a passcode. Also if the last 6.5 days the device is not unlocked by passcode and Face ID does not unlock during the last four hours, it also requires a new passcode for internal access.

This means, Bkav will have up to 48 hours to create the mask and up to five times to try it for Face ID unlocking."This is not impossible, but this is no small barrier for Bkav to interfere inside when they claim the test is conducted without a passcode , " Cnet posted.

"This seems like a series of uncertain challenges that can be completed , " replied Paul Norris, a system engineer with Tripwire security company, to answer Cnet.

Picture 2 of Questions not answered about Bkav's Face ID test
Forbes reported on Bkav's security video but also asked questions in the experiment.

Bkav claims to have used a scanner to develop the mask and this stage takes about five minutes. Next, they invited a professional artist to shape the nose and some areas of hand-processed skin."The requirement to create masks with such high standards is almost impossible to apply in a real attack , " Cnet said.

Some media outlets simply put Bkav's videos and information on the homepage, while reputable technology sites want to clarify the problem. Forbes writer Thomas Fox-Brewster wrote: "Apple Face ID was 'fooled' by a mask of $ 150 but the big question still remains." He commented that there are still gaps in Bkav's experiment, including similar issues Cnethay Arstechnica has set.

The above newspapers all contacted Apple, but the US technology company declined to comment and only mentioned Face ID's security details report. In it, Apple said " Face ID " has a "trained neural network" to detect and combat fake forms. "

Picture 3 of Questions not answered about Bkav's Face ID test
Apple listed Face ID features at the iPhone X launch in September.

Face security was first applied by Apple on the iPhone X as Face ID, to replace Touch ID fingerprint sensor. This technology uses a series of built-in sensors on the front of the machine, allowing 3D detection, not merely 2D images like some previous technologies.

According to the manufacturer, the same face rate that Face ID may be mistaken for is one part a million, meanwhile, the same rate with Touch ID fingerprint is one fifty thousand. Apple also announced that it has invited some top makeup and makeup experts to increase the security of its technology.

In addition, Face ID is also applied, in which, each use, the ability on iPhone X becomes more effective. It also made Apple's security mechanism appear weak when there was a FaceID test mistakenly the two brothers were 5 years apart.

On 11/11, Bkav, a large Vietnamese technology group, posted a video on YouTube, announcing the Face ID feature on Apple's new phone could be overcome by a 3D print mask. The statement "Defeated by Bkav's mask, Face ID is not enough security" on Bkav's homepage not only received the attention of domestic technology but also appeared on many international sites. According to Bkav, the mask they made is 150 USD (about 3.4 million VND). While big sites like Wired or WSJ cost thousands of dollars to make masks, use many different materials, but still not "penetrate" the protection barrier of iPhone X.