Pierluigi Paganini March 12, 2019

The screen lock feature in the Samsung Galaxy S10 that is based on face recognition can be easily bypassed using a photo or a video of the owner.

The discovery was made by users and tech reviewers that demonstrated how to bypass face recognition screen lock implemented in the Samsung Galaxy S10 model. Even if in the past there were reported several cases of facial recognition lock bypass, new generation devices (Samsung Galaxy S9, S9 + and Note 9, Apple iPhone XS, XS Max and XR) promises better efficiency for their systems. Recent discovery demonstrates the opposite.

“The S10 does have a face unlock feature, but it’s just using the camera to look for your face and compare it to a previous image — there’s no 3D mapping or anything. I was actually able to unlock the S10 with a video of my face played on another phone.” reads a review published by The Verge.

The trick could be exploited by a local attacker to unlock the device and access users’ private info.

Samsung and other vendors warn that face recognition is less secure than other lock methods and they don’t exclude that someone who looks like the device owner or who uses an image of his face could unlock the phone.

Another aspect to consider is that face recognition might not recognize the owner if there are major changes to their appearance. Heavy makeup, the use of glasses, facial hair changes could interfere with facial recognition.

Pierluigi Paganini

(SecurityAffairs – Samsung S10, hacking)

[adrotate banner=”5″]

[adrotate banner=”13″]