One week after release, iPhone X's Face ID reportedly defeated by a $150 mask

The Vietnamese security company Bkav says that a prototype mask costing $150 can reliably defeat Apple's Face ID authentication system. However, the company (which has a good track record for defeating facial recognition systems) has not released technical details for the defeat and says that it was able to accomplish the task "Because... we are the leading cyber security firm ;)." Read the rest

Moral panic: Japanese girls risk fingerprint theft by making peace-signs in photographs

Isao Echizen, a researcher at Japan's National Institute of Informatics, told a reporter from the Sankei Shimbun that he had successfully captured fingerprints from photos taken at 3m distance at sufficient resolution to recreate them and use them to fool biometric identification systems (such as fingerprint sensors that unlock mobile phones). Read the rest

Rubber fingertips to use with fingerprint-based authentication systems

Mian Wei, a Chinese student at the Rhode Island School of Design, has created an experimental series of fake fingertips with randomly generated fingerprints that work with Apple and Android fingerprint authentication schemes, as well as many others. Read the rest

Security-conscious darkweb crime marketplaces institute world-leading authentication practices

If you are a seller on Alphabay -- a darkweb site that sells "drugs, stolen data and hacking tools," you'll have to use two-factor authentication (based on PGP/GPG) for all your logins. Read the rest