Face Unlock: 0. Picture: 1.

[zkSharks]

Android's New Face Unlock Feature Fooled by a Picture

The "photograph-vs-face unlock" issue seemed to the prevailing thought when face unlock was first announced... I'm definitely interested in seeing a response to this.

Tim Bray responded to a comment about face unlock's potential insecurity by saying "Nope. Give us some credit." While I don't expect face unlock to be some high-security protection for a phone, I do think his statement could use some backing-up or clarification at this point.

 

[whartpence]

I think just about every time face unlock is mentioned they say it is low security. This video proves it. I would still use it. I don't lock my current phone because I hate entering a pin all of the time. Face unlock looks like it will be less of a hassle.

 

[delco714]

What about the bubble pattern unlock. I've always used that. Fast but secure, as long as you wipe the phone down

 

[ManBearPig618]

It's a convenience, not a security.

 

[qnet]

I believe I saw on one video when you first enable it, there is a disclaimer saying how it's experimental. It's the same kind of message that appears on previous nexus devices when first using the voice command feature.

 

[Friend-O]

What random phone thief is just going to happen to have a photo of the phone's owner on hand? I think the only person that would need to worry about this as a security risk is the President. This really is much ado about nothing. Pretty silly IMO.

 

[zkSharks]

I'm definitely still going to use it, and there are most definitely flaws with other security methods (such as smudges for pattern unlocks, etc.).

However, Tim Bray responded to a comment about face unlock's potential insecurity by saying "Nope. Give us some credit." I guess that statement just needs some clarification now.

 

[kca2000]

So many problems with this Face lock i dont even see why it was included. What convenience is there when you still have to use a pin at night to unlock it? or when it fails?

Now a photo unlocks it to? So anyone with access to my facebook page might be able to unlock my phone? Thats security?

Ill stick with the 2 swipe pattern unlock ive been using for years. Quick and secure enough for me.

I dont see myself using the face unlock other then when people ask about it or want to see it.

 

[hyperdude]

One thing we're missing when we watch the video: Was the GNex set up in the same lighting and probably same facial expression as the photo? If so, then this isn't all too surprising, since it would be like: "Here's me. And... here's a picture I just took of myself. Similar?"
What I'd like to see is someone setting up face unlock and then using an older photo or some other source to try to unlock it.

Either way, I'll still use Face Unlock on my GN. It's a convenience, not meant for massive security. But hey, it's more secure than slide-to-unlock (or drag-to-unlock in the case of HC/ICS) if you don't have a picture.

 

[Tom in Bristol]

Maybe this is just a testament to the pic quality of the other phone he used??

 

[moosc]

Geeze folks come on the day after this phone was announced kousch our favorite developer stated that a hi Res picture would unlock the phone. A couple days later google said there is a possibility this could happen. Such old news. And this is just a novelty item.

 

[estebancam]

Firs of all, it is not very widepread that a person trying to hack your phone would have a picture of you. Secondly..... it is not very widespread that a person trying to hack your phone would have a picture of you.

 

[estebancam]

Maybe this is just a testament to the pic quality of the other phone he used??

I see what you did there. lol

 

[edoublediz]

the only people this is a real problem for is cheating spouses and boy/girlfriends!!!!

 

[TuxDotKing]

I'm suprised people care enough to decry it as a security detriment.

Wasn't that obvious? This isn't a retina or fingerprint scanner. It's facial unlock. It's been around on computers forever, with the same issues. It's a novelty item, Google put it in to add a little extra wow factor to consumers.

Google could use a little more focus on wow factors. It's one of the places iOS devices kinda beat it (though it all gets old eventually).

 

[Akuma]

It's a convenience, not a security.

I believe it's both. If someone steals my phone and they don't know me/have a picture of me. It becomes security. I'd say it's more low security than a convenience

Sent from my ADR6300 using Tapatalk

 

[Mac58]

One thing we're missing when we watch the video: Was the GNex set up in the same lighting and probably same facial expression as the photo? If so, then this isn't all too surprising, since it would be like: "Here's me. And... here's a picture I just took of myself. Similar?"
What I'd like to see is someone setting up face unlock and then using an older photo or some other source to try to unlock it.

Either way, I'll still use Face Unlock on my GN. It's a convenience, not meant for massive security. But hey, it's more secure than slide-to-unlock (or drag-to-unlock in the case of HC/ICS) if you don't have a picture.

Exactly. I dont want to knock the credibility of the site who posted this, but would it really have taken that long to first unlock the phone with his own face to prove that it was set up with his face and then unlocking with picture? I mean if I had discovered this and I knew people would doubt me, I would make my story and video as believable as possible and his is not as it leaves holes.

Regardless. I will still use face unlock because with google, EVERYTHING gets better over time and I am not worrying about a random thief finding a picture of me to unlock my phone... I know I am an idiot...

 

[Mac58]

I believe it's both. If someone steals my phone and they don't know me/have a picture of me. It becomes security. I'd say it's more low security than a convenience

Sent from my ADR6300 using Tapatalk

.....I dont know how someone would steal your phone, not know you AND have a picture of you.... Sorry could you explain that one to me?

 

[Cigar-Junkie]

I never lock my phone due to the amount of times a day that I use it and don't need the hassle. If this feature makes it fast easy and convenient, I will use it. If it falls short, I won't, no big deal. With the combination of expensive flashy phone, NFC/Google Wallet, large amount of information and massive contact list it is probably time I added a little more security to my phone. I do hope it does work though.

 

[Fable]

I don't know about claiming how much of a security hole this might be, because I don't think biometric consumer devices will meet corporate or federal guidelines for some time. It is nice to see that these kinds of tools are being added to phones though. Currently a growing problem for corporations is that phones are being used in place of tokens to manage dual factor authentication, meaning that phones and potentially tablets currently break the rules in such enviornments because they are already being used as a factor. So adding a biometric layer to the phone may be the answer to this. Multi-factor authentication in business is becomming the norm and its already recommended/required (depending on your line of business) by NIST. Its a technology that is in its infancy on consumer devices, I give them props for actually going with it.

A better question may be.. hey if I hold onto this phone for 2 years and I gain/lose X amount of weight... at what point am I locked out of my phone and need to go find an old Facebook photo