Security Firm Says Extremely Creepy Mask Cracks iPhone X's Face ID : The Two-Way A video shows the Vietnam-based Bkav apparently bypassing the feature. Apple has touted the function as secure since it was unveiled in September.

Security Firm Says Extremely Creepy Mask Cracks iPhone X's Face ID

  • Download
  • <iframe src="" width="100%" height="290" frameborder="0" scrolling="no" title="NPR embedded audio player">
  • Transcript


Next, has Apple's security for its latest iPhone already met its match? We'll pose that question on today's All Tech Considered.


SIEGEL: When Apple introduced its new top-of-the-line iPhone in September, the company's top marketing executive touted its coolest feature.


PHIL SCHILLER: The iPhone X, your iPhone is locked until you look at it and it recognizes you. Nothing has ever been simpler, more natural and effortless. We call this Face ID.


SIEGEL: Phil Schiller talked up the phone's facial recognition function. Face ID, according to Schiller, is 20 times harder to crack than Touch ID.


SCHILLER: Now, the team's worked hard to make sure the Face ID can't easily be spoofed by things like photographs. They've even gone and worked with professional mask makers and makeup artists in Hollywood to protect against these attempts to beat Face ID.

SIEGEL: Well, not from Hollywood, but from Vietnam comes a claim of hacking Face ID with masks and just over a week since the phone went on sale. NPR's Laurel Wamsley has been following this. And, Laurel, who claims to have fooled - or spoofed, I guess, is the term of art - Face ID?

LAUREL WAMSLEY, BYLINE: It's a Vietnamese company called Bkav. They make their own smartphone. But they're a security firm, and so they try to prove that things are not as secure as they appear. And they have sort of a track record of beating facial recognition technology that already exists on laptops.

SIEGEL: What did they do?

WAMSLEY: So in this case they posted a video a few days ago, less than a week after they'd gotten the iPhone, that shows them sort of unshrouding this mask and presenting the mask in front of the new iPhone X. And indeed, the iPhone X opens up and unlocks when it sees the mask. And then the company employee turns the phone back towards himself and shows him unlocking it with his own face. And they say this proves that they were able to design a mask that can fool the facial recognition technology.

SIEGEL: So let me guess - did Apple concede defeat and say they must be right and the security is terrible on our new top-of-the-line iPhone?

WAMSLEY: They did not do that. And they have not commented.

SIEGEL: Not commented. Other people have tried to do this. They've tried to crack the iPhone X. Is there any reason to doubt the Bkav claim?

WAMSLEY: Yeah. So this is actually been sort of a fun thing. So since Apple announced this new technology back in September, different tech companies and different outlets have tried to beat the system here by making their own masks and things to try to fool that. So I think there is some skepticism that, you know, Wired magazine hired all these makeup artists and stuff to try to crack it, but this company did it itself. So there's no reason in particular to think that it's not true. But the video is very short, and we don't know that this company might not have trained it in some ways to recognize this mask.

SIEGEL: Do we know whether in order to crack somebody's iPhone X the way that this company, Bkav, claims to have done - would they have to have access to my face to do this on my phone? Would they have to make a mask of me to do this?


SIEGEL: They would?

WAMSLEY: They would. Yeah, they would have to have not just your picture, but also the dimensions of your face. This would involve 3-D printing, 2-D printing, makeup. It's a lot of work to create a likeness of you that would convince your phone it's you.

SIEGEL: NPR's Laurel Wamsley, thanks.

WAMSLEY: Thank you.

Copyright © 2017 NPR. All rights reserved. Visit our website terms of use and permissions pages at for further information.

NPR transcripts are created on a rush deadline by an NPR contractor. This text may not be in its final form and may be updated or revised in the future. Accuracy and availability may vary. The authoritative record of NPR’s programming is the audio record.