Facepalm: Pixel 4's face unlock works when your eyes are closed
Google has switched from a fingerprint reader to an Apple-style "face unlock" system on its new Pixel 4, but it seems that Google may not have taken the same extra steps when it comes to customer security and privacy that Apple did. While the iPhone (by default) needs you to have your eyes open for Face ID to work in what it calls an "attention" requirement, Google's system is happy to unlock your phone even with your eyes closed.
The Pixel 4 facial recognition works even if you're asleep / dead. That seems problematic #madebygoogle #pixel4
Google's support documentation may not be the most accurate these days, but even it is clear about the privacy implications of using the company's new face unlock system, explicitly stating in a disclaimer that "your phone can also be unlocked by someone else if it’s held up to your face, even if your eyes are closed."
Apple's recent iPhones, which also support a facial recognition security system called Face ID, require by default that your eyes be open in what it calls an "Attention Aware" feature. Although it can be disabled for your convenience should you choose, the default setting is to enhance your security by requiring that your eyes be open and looking at the phone, so it shouldn't work while you're sleeping or otherwise unaware of what is occurring.
Ensuring that you're awake, aware, and actively intending to unlock the device seems like an obvious step to take for security if it's an option, but for whatever reason, Google seems to have decided not to implement it. Previously, Pixel 4 leaks showed an additional "require eyes to be open" setting for face unlock, though we can confirm that specific option is not present on the Pixel 4 as of now, and Google has also informed the BBC that the setting won't be present when the Pixel 4 is released.
In the meantime, prospective Pixel 4 owners will need to remember that closing your eyes won't protect you from this:
Comments
Post a Comment