The face of a gypsum made with a 3D printer risks breaking face authentication of smartphones

Instead of traditional fingerprint authentication, many people use face authentication like Apple's "face ID" to release the lock screen of the smartphone. However, with regard to the safety of the face authentication function, there is a danger that it can be unlocked by using "face" output by 3D printer.

We Broke Into A Bunch Of Android Phones With A 3D-Printed Head
https://www.forbes.com/sites/thomasbrewster/2018/12/13/we-broke-into-a-bunch-of-android-phones-with-a-3d-printed-head/

3D-printed heads let hackers - and cops - unlock your phone | TechCrunch
https://techcrunch.com/2018/12/16/3d-printed-heads-unlock-cops-hackers/

Journalist Thomas Brewster investigated whether it can overcome smartphone face authentication using "face" of plaster made with 3D printer. It is a smartphone with Apple's iPhone X, LG's G7 ThinQ, Samsung's Galaxy S9, Galaxy Note 8, OnePlus's OnePlus 6, which is a face-authentication unlocking function.

Mr. Brewster ordered a statue of plaster that printed his face on the backface of the UK in 3D. The plaster face is based on 3D data made from all directions using 50 cameras, and it is said that coloring and touchup will be done after being output.

The result is that iPhone X only refused to unlock by the face of plaster, Android 4 terminals all released the lock. Some models are difficult to lock unlocked by updating software, like G7 ThinQ, and some terminals may unlock easily with little resistance, like OnePlus 6.

According to Mr. Brewster, there is Microsoft's Windows Hello in addition to Apple's terminal that does not allow unlocking with fake faces outputted by 3D printers. The fact that the two companies listed as one of the world's most valuable companies provides the highest security is said to be no surprise at all.

In addition, TechCrunch is the act itself of unlocking the smartphone seized by an investigative agency such as a police using "fake face" outputted by the 3D printer itself, the 5th amendment of the Constitution of the United States, "everyone in a criminal case, I do not conflict with the provision that I will not be forced to make a statement that is disadvantageous to him ", he points out the possibility of accessing smartphone data by unlocking using the face of the creature. Also, if you consider hacking risk not only from the investigation agencies but also from malicious third parties, we also point out that the "password" that is hated is the only thing that protects the data.