Authentication for Apple’s most recent iPhone was recently bypassed by a 10-year-old boy who used Face ID to access his mother’s iPhone X, by a set of twins, by a pair of half-brothers from Britain and even by a 3D-printed mask in Vietnam.
According to Apple’s support page, “the TrueDepth camera captures accurate face data by projecting and analyzing over 30,000 invisible dots to create a depth map of your face and also captures an infrared image of your face.“
The TrueDepth camera system that “accurately maps the geometry of your face” is also used to authorize purchases and payments. If a 10-year-old was able to trick it in a split second to read his mom’s messages, emails, and who knows what else, he could also bypass security and make various payments. The story was meticulously analyzed by Wired.