Apple Recommends Children Under 13, Twins and Siblings Do Not Use Face ID On iPhone X (theguardian.com) 120
According to a security guide published Wednesday, Apple recommends that children under the age of 13 do not use Face ID on the iPhone X due to the probability of a false match being significantly higher for young children. The company said this was because "their distinct facial features may not have fully developed." They also recommend that twins and siblings do not use the new feature. The Guardian reports: In all those situations, the company recommends concerned users disable Face ID and use a passcode instead. With Face ID, Apple has implemented a secondary system that exclusively looks out for attempts to fool the technology. Both the authentication and spoofing defense are based on machine learning, but while the former is trained to identify individuals from their faces, the latter is used to look for telltale signs of cheating. "An additional neural network that's trained to spot and resist spoofing defends against attempts to unlock your phone with photos or masks," the company says. If a completely perfect mask is made, which fools the identification neural network, the defensive system will still notice -- just like a human.
-1 Redundant (Score:3)
Do they really need to specify both twins and siblings?
Re:-1 Redundant (Score:4, Insightful)
Re: -1 Redundant (Score:1)
Apple's new courage:
Telling kids they were born wrong.
Re: (Score:2)
About 20% of American families have only one child, but that is only about 10% of births. Roughly another 10% of the population, mostly elderly, have no living brothers or sisters. The other 80% of the population are siblings.
Disclaimer: I have siblings, but they don't look like me.
Re: (Score:2)
You should ask your mom about that sometime :-)
Re: (Score:2)
Disclaimer: I have siblings, but they don't look like me.
Good for them - who wants to look like an asshole?
Re: (Score:2)
I should safe my brother grew up resembling the milk man
Re: (Score:2)
I was wondering about this from another standpoint. What if you set-up Face-ID at the age of 10 and by the time you reach 12/13 your face has elongated enough that you can no-longer unlock your device.
Well, you could have read the fucking report by Apple, but you chose to look like an idiot instead (and no, that doesn't mean any idiot could unlock your iPhone).
To improve unlock performance and keep pace with the natural changes of your face and look, Face ID augments its stored mathematical representation over time. Upon successful unlock, Face ID may use the newly calculated mathematical representation—if its quality is sufficient—for a finite number of additional unlocks before that data is discarded. Conversely, if Face ID fails to recognize you, but the match quality is higher than a certain threshold and you immediately follow the failure by entering your passcode, Face ID takes another capture and augments its enrolled Face ID data with the newly calculated mathematical representation. This new Face ID data is discarded after a finite number of unlocks and if you stop matching against it. These augmentation processes allow Face ID to keep up with dramatic changes in your facial hair or makeup use, while minimizing false acceptance.
siblings? (Score:4, Insightful)
Like most people on Earth?
Re:siblings? (Score:4, Informative)
Look alike according to Algorithm (Score:2, Flamebait)
Apple did specify "siblings that look like you",
Yes, but what they mean is siblings that look like you according to an algorithm which also thinks that all kids under 13 look alike. This doesn't exactly inspire much confidence especially if this is the algorithm protecting your Apple Pay cards on your phone. Mind you at the price they are charging you probably won't have much money left on those cards for your look alike to access.
Re: (Score:1)
Yes, but what they mean is siblings that look like you according to an algorithm which also thinks that all kids under 13 look alike.
Not exactly... There is a higher probability of false matches due to fewer distinguishing features, but that doesn't mean all of them look alike. Just that there are more groupings of look-alikes than with adults.
Re: (Score:3)
Re: (Score:2)
Re: (Score:2)
So a Donald Trump impersonator could unlock the Presidentâ(TM)s Twitter machine...
Actually, give how Trump distorts his own face when speaking, Face ID will probably not be able to identify him if he just opens his mouth.
What about sheep ? (Score:2)
What about sheep ?
You can't make a safe distinction between sheep's faces.
So why did Apple implement this face recognition is beyond me.
I recommend not buying an iPhone X. (Score:1, Troll)
Buy the 8, SE, 7 or 6S (or Droid) and vote with your wallet against this half arsed system AND save a bundle in the process.
Re: (Score:1)
Re: (Score:2)
Buy the 8, SE, 7 or 6S (or Droid) and vote with your wallet against this half arsed system AND save a bundle in the process.
To vote with your wallet, you need to buy from another party. Otherwise they think you just arent rich enough and will want it when it gets cheaper.
Re:The loss of touch ID is a fatal flaw (Score:4, Informative)
Too many compromises, too many security holes.
Apple promote Touch ID has having 1 in 50,000 chance of false positive, while Face ID is 1 in 1,000,000
Re: The loss of touch ID is a fatal flaw (Score:2)
Due to the nature of false positives, this is pretty irrelevant.
Re: (Score:2)
1/1,000,000
Unless you're under 13 or have a sibling.
Perhaps they just mean out of all 7.5 billion faces in the world right now, 7,500 of them will unlock your phone. I assume there is really, really fine print about the chances being much higher if the face belongs to someone who looks similar to you, like a twin or even a sibling.
Re: (Score:1)
Re: (Score:2)
Yes, and the distribution of those people is important. If fingerprints have 150,000 people randomly distributed through the entirety of earth's population that would unlock your phone, that's not bad. It would be pretty hard to find one of those people. It would be much better than say, in the worst case, that the 7,500 people that can unlock your phone with FaceID happen to be your 7,500 closest relatives, which would be fairly easy to find. This is an extreme example, but it demonstrates my point in the importance of the distribution.
Errm, dude, only in our home town everybody under 30 looks like the postman.
Re: (Score:2)
Yet did Apple ever tell 12 year olds Touch ID wouldn't work for them? Or siblings?
Has anyone ever produced a Touch ID collision using 2 different fingerprints? It's easy enough to fool by cloning the targets fingerprints, despite claims to the contrary, but has anyone actually encountered a case where someone using Touch ID has found someone else that passes their Touch ID check?
Re: (Score:3)
Apple promote Touch ID has having 1 in 50,000 chance of false positive, while Face ID is 1 in 1,000,000
For sufficiently loose definitions of 1 in 1,000,000, apparently.
Re: (Score:2)
1 in 1,000,000 with 5% confidence ;-)
Re: (Score:1)
Re: (Score:2)
So ... about 8,000 people on this planet can unlock my phone?
With a pass token that I can neither change nor keep secret to boot...
Re: (Score:2)
So ... about 8,000 people on this planet can unlock my phone?
And since they generally have to look like you, the odds that one of those 8000 people is someone of the same race, same heritage, even someone you know, are related to, and perhaps even live...
-facepalm-
Re: (Score:2)
Well, I actually did learn that I have someone who looks stunningly like me without even being related to me in any way. Unlike me, though, he can actually play the guitar and sing, otherwise you could think he's my twin.
So it needn't even be someone living with you or related to you. But of course you're right, the chances are vastly higher in your own family.
Re: (Score:1)
Too many compromises, too many security holes.
Apple promote Touch ID has having 1 in 50,000 chance of false positive, while Face ID is 1 in 1,000,000
"Promote" is an odd word to use, almost like it's marketing and not real statistics based on experiments or even predictions. Is there a white paper or published study (preferably peer-reviewed) behind those numbers, or is it just insanely incredible marketing?
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Marketing speak, and to hit the numbers they just added a whole lot of restrictions.
iPhone 9: The new Face ID has a 1 in 1,000,000,000 false positive rate. Note to achieve this your face needs to be permanently and uniquely disfigured in a horrible industrial accident. However we don't suggest you use this feature if you lost your nose completely, only if it is bent in a non-standard direction. Using it without a nose may cause a false positive for other disfigured people who also lost their noses.
Apple rec
Re: (Score:2)
Re: (Score:2)
This is the same problem as DNA 'fingerprinting'. Statistically, there are likely to be around 50 people in the UK who have the same DNA fingerprint..
Not that I'm doubting your 'integrity' (fwiw, I'm not) but this is a new statistic to me and one which, if true, is seriously troubling.
Would you, by any chance, have a reference to a reliable source for this figure? If that reference went into detail regarding accuracy based on number of STR's used or the number of sample sites or the like so much the better.
I have had a quick search online but I'm not seeing anything that would suggest a figure anywhere remotely close to the one you give (ignoring immedia
Re: (Score:2)
Would you, by any chance, have a reference to a reliable source for this figure?
I don't have the original source for the number. I heard it in a Royal Institution Christmas Lecture Series ('Faraday Lecture') about 15-20 years ago. The fingerprinting technology may have improved since then, though given how long it takes before a new technique can be approved for use in court, I'd be surprised if it's much different.
Re: (Score:2)
This is the same problem as DNA 'fingerprinting'. Statistically, there are likely to be around 50 people in the UK who have the same DNA fingerprint..
Not that I'm doubting your 'integrity' (fwiw, I'm not) but this is a new statistic to me and one which, if true, is seriously troubling.
Would you, by any chance, have a reference to a reliable source for this figure? If that reference went into detail regarding accuracy based on number of STR's used or the number of sample sites or the like so much the better.
https://youtu.be/ScmJvmzDcG0?t... [youtu.be]
Re: (Score:2)
Thanks, I think (bloody geoblocking...)
I'll find a US proxy at some point and give it a look.
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
1:1,000,000 for a random fucking stranger maybe -- but it sure as hell seems higher than that if they're warning about /siblings that look like you/. That's even identical, that's fairly close. This should raise fidelity questions of the scans, and the need for this shitty technology in the first place.
A one in a thousand chance that somebody who "looks just like you" can unlock your phone is still pretty low.
Re: (Score:2)
That is so wrong it's not even funny. They had nothing to do with the development of the fingerprint sensor... They bought the company over, right underneath Google which was planning to do it on their next phone
How dare they buy a company that Google wanted to buy to pretend they developed something!
Re: (Score:2)
Hey, earlier models could do this even without 3 failed attempts. All you had to do is repair it when it breaks.
Ah, the lovely trend of feature removal (Score:1)
The wonderful trend of feature-removal in the modern computing and electronics world. Take a feature like using a fingerprint, and then instead of ADDING facial recognition, REPLACE the fingerprint technology, which worked pretty darn well, with something that doesn't work properly for massive portions of the population. We have sheephumping morons running, and ruining, everything...
Re: (Score:2)
*gasp*
Don't tell me Apple is now anti-LBQTBBQWTFKMA?
Children need to get some scars first (Score:1)
Re: (Score:2)
That can be arranged.
So much fear over the Face ID (Score:1)
Who would give a $1,000 phone (Score:2)
to a child under 13 ? The chances of it being lost or stolen are quite high!
Re: (Score:2)
So they can go to school without having to hang their heads in shame.
Re: (Score:2)
The chances of it being lost or stolen are quite high!
Even more so now that apparently any other kid under 13 can unlock it!
COPA (Score:1)
Its because they are pushing the data somewhere. Those under 13 fall under the Child online protection Act so apple wants none of that.
Bullshit, Bullshit, Bullshit (Score:3, Insightful)
It's all bullshit. Whatshisfuck stood on stage and claimed that it was orders of magnitude more secure and reliable than TouchID. What happened?
If a completely perfect mask is made, which fools the identification neural network, the defensive system will still notice -- just like a human.
Nope. If a "perfect" mask is made, the defensive system won't notice. And neither will a human. And if a "good" mask is made, the defensive system won't notice, but a human will.
Your system isn't usable for children under 13 because "their distinct facial features may not have fully developed"? Bullshit. It isn't usable because it doesn't work well. 12 year olds have faces as distinct as any other human face, far more distinct than a fingerprint, etc. You are using a high res 3D ("depth sensing") camera, thousands of points of detection, etc., etc., right?
If you can't distinguish 2 faces your shit is broken.
If you can't recognize 1 face as being the same your shit is broken.
If you can't walk the line between false positives and false negatives, you lie and dream up some shit about a defensive mechanism that's always working even when Face ID isn't working right, or Face ID not working because your faces haven't aged to distinction yet.
Bullllllllllllllllllllllllllllllllllshiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiit!
Re: (Score:3)
It's all bullshit. Whatshisfuck stood on stage and claimed that it was orders of magnitude more secure and reliable than TouchID. What happened?
What happened is 1 or more people looked at the phone in its locked state backstage and it rolled over to passcode only, it was actually a good demo of how secure it is.
Nope. If a "perfect" mask is made, the defensive system won't notice. And neither will a human. And if a "good" mask is made, the defensive system won't notice, but a human will.
while getting a perfect 3-d scan of the persons face and making a 3-d printed model may work - on the other hand, pun intended, lifting a fingerprint from anywhere and using it to unlock an iphone touch sensor [arstechnica.com] is trivially easy, children have defeated it by touching it against their sleeping parents hand. Cops can force you to touch unlock
Re: (Score:1)
What happened is 1 or more people looked at the phone in its locked state backstage and it rolled over to passcode only, it was actually a good demo of how secure it is.
So users of this phone will have to be careful not to allow the camera to see other people's faces or it will 'false negative' on them and automatically lock? That makes little sense.
I bet, though, that when the face recognition feature failure occurred during the demo, they were ready, Apple probably had a team ready and waiting to fabricate whatever the most plausible explanation would be for any on-stage incident during the presentation. They probably have focus groups ready and waiting to bounce their stories off of. The marketing shit is really, really important at Apple, because it's the basis of their high markups.
Re: (Score:2)
Re: (Score:2)
It's all bullshit. Whatshisfuck stood on stage and claimed that it was orders of magnitude more secure and reliable than TouchID. What happened?
"More" is not necessarily more than a lot. A condom you had in your back pocket for a month is also more secure than "don't worry honey, I'll pull out".
Re: (Score:1)
What the hell kind of comment was that?
Re: (Score:2)
The comparative isn't necessarily an augmentation to the positive. When someone answers "better" to the question how he's feeling, it usually means he's far from feeling well.
Re: (Score:2)
I don't know if faces are more unique than fingerprints or not, but the more important difference is how they are measured. Fingerprint scanners are quite mature now, where as face scanning with a camera in varying lighting conditions, angles and the like is still not even good enough to differentiate human children reliably.
Imagine if human parents couldn't tell their children's faces apart... Anyone with identical twins will attest to what chaos that can cause.
Re: (Score:2)
That's why face scanning doesn't rely on a si
Re: (Score:2)
It's all bullshit. Whatshisfuck stood on stage and claimed that it was orders of magnitude more secure and reliable than TouchID. What happened?
Apple claims that Touch ID has 1 in 50,000 chance of false positive, while Face ID is 1 in 1,000,000. A factor of 200 is indeed "orders of magnitude".
I am however surprised that TouchID has only 1 in 50,000 chance of false positive.
Re: (Score:2)
And this article is proof that the 1/100k is also bullshit. Siblings for fucks sake!
This reminds me so much of the Nuance voice auth system that was supposedly 1/10k false positive rate, but anybody could log on as anybody else by doing a half-assed impression of their voice.
Re: (Score:2)
It's all bullshit. Whatshisfuck stood on stage and claimed that it was orders of magnitude more secure and reliable than TouchID. What happened?
If a completely perfect mask is made, which fools the identification neural network, the defensive system will still notice -- just like a human.
Nope. If a "perfect" mask is made, the defensive system won't notice. And neither will a human. And if a "good" mask is made, the defensive system won't notice, but a human will.
So it's just like with "perfect artificial fingerprints". And nobody uses those to unlock iPhones either, Yeah all you write is bullshit.
Baked in design flaws (Score:2)
Same old Apple line... (Score:1)
Re: (Score:1)
"Designed in California by Apple."
Re: (Score:2)
We're doing something we think is cool, fuck whomever it doesn't work for.
You can't use your phone to make phone calls if your are dumb. And heck, are you dumb as fuck.
Also, probably criminal (Score:2)
If Apple didn't counter-indicate FaceID for children, they would probably be violating COPA - the act that makes it so companies cannot start fucking around with your data til you are 13. Well, at least, not as freely.
Re: (Score:2)
Re: (Score:2)
If Apple didn't counter-indicate FaceID for children, they would probably be violating COPA - the act that makes it so companies cannot start fucking around with your data til you are 13. Well, at least, not as freely.
If that is their concern, they will also soon recommend Europeans against it.
Everyone else (Score:2)
Everyone else recommends nobody use crappy gimmicks like Face ID.
Twins (Score:2)
Similarly my wife and I use touchid and we also know the passcode of each other's phone, sometimes it
Fodder (Score:2)
I would recommend no one should use Face ID, or the IphoneX for that matter.
The NSA thanks you for the updated face scans.
Re: (Score:2)
I thought that Apple had made it so that it's all done on the phone, and stored in the secure enclave, and it's a 'hash' of your face, not your actual face that gets stored anyway.
As for the recommendation - I'd agree with you on all counts (but for different reasons).
Re: (Score:2)
This may be true, but I'd rather err on the side of caution.
First we had Amazon Echo, now they have alarm clocks with camera's on them and now Apple with their FaceID. It's just all too much.
Re: (Score:2)
I would recommend no one should use Face ID, or the IphoneX for that matter.
The NSA thanks you for the updated face scans.
And don't get me started on what they can do with your Android ...
Perfect! (Score:2)
Or.... (Score:2)
That's also the reason why facebook and many other internet companies' terms and conditions all require you to be at least 13 to sign up as well, they simply don't want to have to deal with the hassle of verifying/validating and keeping records that an actual adult explicitly authorized their kid sign
Biometrics (Score:2)
I went to a trade fair, for IT in schools.
Against my wishes, I was asked to research biometric logins.
Pretty much every single stall that offered anything even remotely like that told me one thing (usually after much probing, or literally having to ask outright if it would work).
They don't work reliably enough for kids. Fingerprints. Iris scans. Face recognition. Every vendor told me the same thing, but they weren't actually ADVERTISING that (obviously). They said they would be good enough for, say, a
In other words... (Score:2)
iProsopagnosia (Score:2)
Know what would be nice? A face recognition app that tells me the name of the person I'm talking to. I have a little bit of trouble with faces, even when it comes to close friends, so it would be nice if I had some Augmented Reality overlay to tell me who they are when I haven't seen them for a while. Luckily, so far other people recognise me readily enough so that compensates for my deficiency.
Now... if this app I'm suggesting could also tell identical twins apart... that would be awesome.
Alarmist Headline (Score:2)
The probability that a random person in the population could look at your iPhone X and unlock it using Face ID is approximately 1 in 1,000,000 (versus 1 in 50,000 for Touch ID)... The probability of a false match is different for twins and siblings that look like you as well as among children under the age of 13, because their distinct facial features may not have fully developed. If you're concerned about this, we recommend using a passcode to authenticate.
Until we have some third party testing on how easy it is to fool Face ID, I'm reserving judgment.
That's what I thought... (Score:1)
Apple confirms what I have thought for years. All kids look alike.
Summary (Score:2)
Re: (Score:2)
And if it CANNOT be changed even with your consent it is not fit as a security token either. It's great for identity, but it could hardly be worse for authorization.
Re: (Score:2)
And if it CANNOT be changed even with your consent it is not fit as a security token either. It's great for identity, but it could hardly be worse for authorization.
Hunh? I'll break your nose for free. "Problem" solved, motherfucker.
Re: (Score:2)
You must have forgotten that part where this feature is not compulsory. You may continue to use a passcode.
Re: (Score:1)
You can also probably just disable the screen lock feature entirely.
It's possible you can even use the new Applephone without ever connecting to the Apple servers or having an account with Apple. You can probably use it as a dumbphone.
I might be wrong on this second part, of course.
Re: (Score:2)
It's probably even possible to not buy that phone at all and get a different one!
Re: (Score:2)
I haven't ever bought an iPhone, but I wouldn't be surprised if you couldn't even make emergency calls unless you've set up your iTunes account.
Re: (Score:2)
You must have forgotten that part where this feature is not compulsory. You may continue to use a passcode.
Yeah, but the chances that your twin (even non-identical) knows your birthday you use as your passcode are 100%.