We broke into a bunch of Android phones with a 3D-printed head

Thomas Brewster, Forbes:

We tested four of the hottest handsets running Google’s operating systems and Apple’s iPhone to see how easy it’d be to break into them. We did it with a 3D-printed head. All of the Androids opened with the fake. Apple’s phone, however, was impenetrable.

And:

An iPhone X and four Android devices: an LG G7 ThinQ, a Samsung S9, a Samsung Note 8 and a OnePlus 6. I then held up my fake head to the devices to see if the device would unlock. For all four Android phones, the spoof face was able to open the phone, though with differing degrees of ease. The iPhone X was the only one to never be fooled.

And:

When first turning on a brand new G7, LG actually warns the user against turning facial recognition on at all. “Face recognition is a secondary unlock method that results in your phone being less secure,” it says, noting that a similar face can unlock your phone. No surprise then that, on initial testing, the 3D-printed head opened it straightaway.

And:

There’s a similar warning on the Samsung S9 on sign up. “Your phone could be unlocked by someone or something that looks like you,” it notes.

What I get from these tests: Android facial recognition is for convenience. Apple’s Face ID is for both convenience and security.



4 thoughts on “We broke into a bunch of Android phones with a 3D-printed head”

  1. Proof that those who don’t appreciate Apple’s extra efforts to make quality products, or who aren’t willing/capable of paying the price, won’t benefit from Apple’s labors.

  2. To be fair, if it takes a special, personalized printed head made from detailed surround imaging and hand-finished, it’s not a real risk for almost all users.

    (If a generic head-shaped thing made on a $200 plastic-spewing 3D printer could unlock them, that would be devastating. But it seems that they’re not that easily fooled.)

    Adding the IR component as Apple (and Microsoft, e.g. on the Surface) does is a good idea, though, for more serious security.

  3. This reminds me when TouchID was first released and someone “hacked” it…with the help of a very expensive printer, high res photo of a fingerprint et etc.

    Sure, it’s not a good look and it makes for good copy but not a real world concern.

    Unless of course Ethan Hunt and the IMF start making masks of us all…

Leave a Reply

Your email address will not be published. Required fields are marked *