Ice Cream Sandwich Face Unlock deceived by photograph [Video]

If you tuned in to the big event in Hong Kong last month, you might remember Face Unlock, Ice Cream Sandwich‘s new security feature that allows users to do away with pin codes and unlock gestures. You may also remember the Twitter exchange between Koushik Dutta (Koush), the leader developer and founder of ClockworkMod, and Google’s Android-focused Developer Advocate Tim Bray. Koush questioned the feature’s ability to detect attempted trickery using a photograph, and Bray was quick to point out that it was not the case. He even suggested that people should give Google credit. Come on now, Tim.

Now there’s a little video making its rounds that seems to disprove Mr. Bray’s claim. In the video, you’ll see the good ol’ Samsung Galaxy Nexus and the Galaxy Note. The Gentleman recording the film attempts to dupe the Nexus with a photo of his face, displayed on the Note’s screen. It works — not once, not twice, but three times. Of course, this would seem to make a mockery of  Mr. Bray’s statement.

However, there’s a tidbit of controversy surrounding soyacincautv‘s  94-second video. As you’ll note in the video, the original scan on the Galaxy Nexus — the one that was used to set the photo to be used to unlock the device — is not recorded in the video. Of course, there’s a little subtitle that pops up explaining that the scan was, in fact, taken of his face and not of the picture from the Galaxy Note.

Here’s what I don’t get out of this whole scenario. How could the person responsible for making such a video be so careless and not include himself taking the original photo. I’m not calling anyone a liar. I just think that making a video of this nature is asking for trouble if important bits of information like that are left out.

In an update on soyacincautv’s YouTube page, the man behind the camera had this to say:

We’re featured on TheNextWeb and Phandroid! Yet the question still arises on whether I had set up the device to recognise my face or a pciture of my face to do this demo.

While some of you think that it is a trick and I had set the Galaxy Nexus up to recognise the picture, I assure you that the device was set up to recognise my face. I have a few people there watching me do the video and if any one of them is watching this video I hope you can confirm that this test is 100% legit.

I would love to do this test again but I don’t have a Galaxy Nexus, it is VERY hard to come by as it is not launched yet, but I urge anyone with a Galaxy Nexus to do the same test. Program the device to recognise YOUR FACE and then try to trick the same device with a similar looking picture, it will work. If anyone does do this test, please tell me so I can link it in this video. Once again people, I know it’s just my words right now but this claim is LEGIT.

As always, thanks for watching.

I’m not 100% sold on this, folks. Why not make another video detailing the entire process? What do you think, ladies and gents? Are you concerned with the security of Face Unlock? Drop us a line in the comment thread and speak your mind.

Source: The Next Web

Via: TechnoBuffalo