PHOTO: APPLE

iPhone X Face ID May Risk User's Facial Data

The iPhone X releases today, and with it come more concerns about the privacy and security of its new Face ID feature.

  • By Jessica Davis
  • Nov 03, 2017

The iPhone X releases today, and with it come more concerns about the privacy and security of its new Face ID feature.  While Apple has stated since it announced Face ID that the user’s facial data is encrypted and stored securely on the iPhone X, application developers may be allowed to take certain facial data from user’s phones.

Apple’s Face ID allows users to unlock their phone by simply making direct eye contact with it. Face ID works by taking the user’s image and a dot pattern created by projecting more than 30,000 invisible dots onto their face to make a mathematical model.

Apple says this biometric data never leaves the device itself and is stored in an encrypted form on the phone’s secure enclave. The data then cannot be accessed by the operation system or any applications on the phone.

However, parts of Apple’s contract allow app developers to take a rough map of a user’s face and a stream of more than 50 kinds of facial expressions off the phone. As long as these developers agree to seek “clear and conspicuous consent” from users, they can remove facial data and store it on their own servers. The data must be used for legitimate app purposes and not marketing or advertisement and cannot sold to third parties that may use it for those purposes.

Questions remain as to how Apple will enforce these terms and their ability to control what app developers do with facial data once it’s taken from the device itself. These reports come shortly after security researchers at Trend Micro’s Pwn2Own contest in Tokyo found exploits in Apple’s newly released iOS 11.1.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • Security Industry Association Announces the 2026 Security Megatrends

    The Security Industry Association (SIA) has identified and forecasted the 2026 Security Megatrends, which form the basis of SIA’s signature annual Security Megatrends report defining the top 10 factors influencing both near- and long-term change in the global security industry. Read Now

  • The Future of Access Control: Cloud-Based Solutions for Safer Workplaces

    Access controls have revolutionized the way we protect our people, assets and operations. Gone are the days of cumbersome keychains and the security liabilities they introduced, but it’s a mistake to think that their evolution has reached its peak. Read Now

  • A Look at AI

    Large language models (LLMs) have taken the world by storm. Within months of OpenAI launching its AI chatbot, ChatGPT, it amassed more than 100 million users, making it the fastest-growing consumer application in history. Read Now

  • First, Do No Harm: Responsibly Applying Artificial Intelligence

    It was 2022 when early LLMs (Large Language Models) brought the term “AI” into mainstream public consciousness and since then, we’ve seen security corporations and integrators attempt to develop their solutions and sales pitches around the biggest tech boom of the 21st century. However, not all “artificial intelligence” is equally suitable for security applications, and it’s essential for end users to remain vigilant in understanding how their solutions are utilizing AI. Read Now

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

Most   Popular

New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities