Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Ok, the guy demoing the iPhone X just had to switch to the backup phone because the Face ID on the first one didn't work quite smoothly.


actually, the phone had been rebooted, so he needed to unlock with a pin to activate it.


Actually, the message ("Your passcode is required to enable Face ID") was identical to the message when too many failed Touch ID attempts are made, not when a phone is rebooted ("Touch ID requires your passcode when iPhone restarts").


Still, at least I didn't notice, and probably the average user didn't either, which makes it just look as a major blooper. I loved the phone though.


at least he knew the password and wasn't relying on the face recog to get into the phone, that could have been rough


IIRC he didn't use the passcode, they switched over to a backup phone.

For presentations like these you always have multiple devices standing by, ready to flip over to at a moment's notice.


I'm pretty sure the backup phone had an imitation of Face ID unlocking.


How are you "pretty sure" about that?


So you can't unlock your phone after coming from a plastic surgery?

I always thought chances of finding facial-doppelgangers are higher than fingerprint ones. Is that really wrong?


You always have the password as backup to unlock. If your appearance were to suddenly change remarkably, such as via plastic surgery or a horrific accident, you would set your new face after unlocking with the password.

Based on their phrasing, I'm assuming the "adaptive" aspect means that slow changes, such as gaining or losing weight, will progressively train the existing face - without it ever failing to recognize you because you passed some weight threshold. Same would go for growing a mustache or beard. As to whether you can shave off a 5-year beard and have it still recognize you without manual intervention, that would depend on how much the algorithm cares about your chin and lip regions vs. the rest of your face. Based on the demo, the hair on top of your head is 100% ignored.


Apple claims that the odds of a random person's finger unlocking your iPhone with Touch ID is 1 in 50,000, and the odds of a random person's face unlocking Face ID is 1 in 1,000,000.


That's interesting. I would think that identical twins would be very hard to distinguish... and those certainly have an almost 1:350 odds. Of course you're likely to know them, but still I'm not sure banks would be happy with that for FIDO.


They did say to not enable Face ID if you have an "evil" twin, which is pretty jokey, but probably 100% true.


A twin could walk into any bank with their sibling's passport and do anything they wanted.

Banks are all about risk management not necessarily avoiding and and all risks.


But a twin wouldn't be able to unlock my iPhone 7 with their finerprint.


You just disable FaceID in that scenario and go back to using a passcode.

But again if you can't trust your twin well then your phone is the last thing I would be worried about.


I think the number is if you choose another human at random, how likely is it that they'll be able to unlock your phone. Having a twin doesn't change that number much, since they're only one person out of 7+ billion. Of course, your threat model may be different from "pick a random human from anywhere on the planet."


> I would think that identical twins would be very hard to distinguish

Ask their mom. (Hint: They're not.)


If you want to teach Face ID to reject masks, you need to make some masks. Similarly, if it needs to be taught to reject a twin, you need dozens of twins. And if it starts labelling people incorrectly as their twins, is it worth it?

Perhaps they can sidestep this by offering a specific twin learning feature.


Twins are just examples of two people with very similar faces. If Apple are able to train Face ID to distinguish between 6 billion different faces they will also be able to distinguish faces of twins.


The twin's mother is inside the phone telling it what to do? Or the person you replied to is talking about technology finding it difficult to distinguish, and not a close family member?


My point is that twins are only difficult to distinguish for people who do not know them. For family and friends it's easy, which means that there are substantial differences even for faces of twins. The face detection technology will be able to recognize those differences as good or better than the twins' family and friends. If it does not now, it will eventually.


I wonder what the odds are of someone unlocking your phone with a picture of your face? I've heard lots of biometrics companies say that their system is immune to such simple hacks in the past, only to immediately fall to such simple hacks in testing.


I believe it uses an IR camera, or similar tech, defeat that, sensing depth. Kinect style. A photo won't defeat it.


This time they’ve got an infrared sensore, as well as two cameras with different focal lengths, so they should be fine.


At least he didn't have to shave his beard off.


I had this feature on my 950 (Windows Phone). It was poor.

Slower and more error prone. Environmental changes such as extreme lighting (being outside) or wearing sunglasses stopped it from working.

Windows Hello and compatible webcams work really well in a stable desktop environment mind. I've just rolled them out across my firm.


No, you didn't have Face ID on your 950, you had whatever you had.

It's Apple's speciality to take good ideas that were never implemented properly and do it properly.


Oh, you didn't have this Apple (TM) brand name feature, you just had the feature. I guess that makes it... better?


It's the Apple modus-operandi of late, take an existing technology and improve it to the point where the friction is non existent.

Sure, many devices had fingerprint scanners before Touch ID, but the Apple implementation was pretty damn impressive compared to what came before.

Still, I can't help but feel that Face ID is a fudge they resorted to because they couldn't get Touch ID working through the screen reliably.


Like Apple Maps?


Would you say that Google never implemented maps correctly?

If not then what the GP said doesn't apply.

Of course we could talk about the fact that Google was demanding all sorts of user data from Apple and wanted the ability to display ads on top of the maps… But people never talk about that. And Apple replace the head of the division that messed it up.

Just Apple is mean.


Is Apple maps better now? Friends of mine using iphone seems to use Google maps.


I've never really had an issue with it. The data is much better than a few years ago. I don't use Google maps (I'm happy with Apple and its integration).

I've heard (anecdotally on podcasts) they're roughly even.

The one thing I've heard in the past is it really depends on where you live. Google had better data in rural areas or other countries (they've been at it for what, almost 15 years?) so Apple Maps may not be an option for some.

In the US? I'm not sure there is a big difference for streets.

(Pretty sure Apple has slightly fewer points of interest like businesses, but it's rare I run into that).


The corollary to "tak[ing] good ideas that were never implemented properly and do it properly", clearly, is taking good ideas that were implemented properly and completely fucking them up.


Well Scott Forstall was fired for among other things Apple Maps.

And that said they have made decent improvements over the years.


And also to take good ideas and never implement them because somebody already did it before them.

Even if that idea was good.


Come on, your 950 didn't make a 3d dot-map of your face. This is very different.


Yes it did an infra-red dot map of the face.

https://www.windowscentral.com/how-iris-scanner-lumia-950-an...

Amazing, -4 for mentioning this isn't a new feature. This is exactly how the kinect works, how windows hello enabled webcams work.


It didn't have face detection at all, it had an iris scanner. Where in that article does it say infra-red dot map of a face?

From https://www.petri.com/windows-10-tip-using-the-lumia-950-wit...:

>Let’s be clear about how Windows Hello works on the Lumia 950. It doesn’t use facial recognition, but instead relies on the front camera and a nearfield IR diode so that the camera can clearly see your iris. When you enable Windows Hello for the first time, your iris is scanned and a cryptographic hash is generated and stored securely on the phone. When you attempt to unlock the device using Windows Hello, a new hash is generated and compared with the original, and if the two match, access is granted.

>Facial recognition on the other hand, as used in some new notebooks designed for Windows 10 and Intel’s RealSense F200 camera, uses three different methods to recognize your face: infrared, a standard camera, and a 3D camera. This technology requires more space inside the device and as such isn’t suitable for use in phones, but unlike iris scanning works at a distance.

You didn't get downvoted for mentioning a feature already implemented elsewhere, you were downvoted by trying to claim a device did something it clearly didn't.


That article doesn't say anything about an infrared dot map of the face - just that "the infrared camera is first used to light up your eyes".

Additionally, https://en.wikipedia.org/wiki/Iris_recognition says "Iris recognition uses video camera technology with subtle near infrared illumination to acquire images of the detail-rich, intricate structures of the iris which are visible externally" which doesn't involve any kind of infrared dot map.


Do you not read your own sources?


I'm simply shocked that Microsoft would go first-to-market with an inferior product.


Samsung also has facial recognition on the S8. You can bypass it by printing out a photo of the owner's face. But I would expect Apple's implementation to be more secure and more reliable than previous poor implementations, otherwise they wouldn't be doing it.


What a load of bull. A simple photo doesn't work, there was a lot more work involved in subduing the facial recognition on S8.


Well, it happened:

https://arstechnica.com/gadgets/2017/03/video-shows-galaxy-s...

Here's what Samsung has to say about the feature

>The Galaxy S8 provides various levels of biometric authentication, with the highest level of authentication from the iris scanner and fingerprint reader. In addition, the Galaxy S8 provides users with multiple options to unlock their phones through both biometric security options, and convenient options such as swipe and facial recognition. It is important to reiterate that facial recognition, while convenient, can only be used for opening your Galaxy S8 and currently cannot be used to authenticate access to Samsung Pay or Secure Folder.

Not exactly a vote of confidence from the manufacturer, is it?


This is not the first time Android has had face recognition to unlock phones. I remember the first time they tried, it was trivially easy to snap a picture of your colleague and open his phone.


Yes indeed. Face Unlock was apparently from Ice Cream Sandwich and fell for this back in 2011:

https://techcrunch.com/2011/11/11/android-facial-unlock-phot...

That's a beta version and I can't guarantee it was true of the release version, but since all they were working with was the normal front facing camera I doubt they were able to make this secure.


I alo had a lumia 950. It does not have face recognition, it has an iris scanner. An infrared light lights up your eyes and then the camera makes an IR picture where it analyzes your iris pattern. The reason it didn't work well is that your eyes had to be open (no squinting, like in bright light), close enough to capture a precise image and in exactly the right spot for the zoomed in camera. I eventually learned a gesture that unlocked it semi-reliably, but it was basically holding the phone right up to my face in the exact right spot.

Now that I see how apple is doing face id I think it will work more reliably ... eventually. I doubt they'll get it right on the first try because this is the kind of feature that has to bake in the real world (like apple maps). Still, they may surprise us like they did with the equally hard touch id feature.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: