The cybersecurity researchers from Vietnam used a mask constructed from stone paper, as opposed to the plastic material used in the previous mask, and glued 2D images of eyes onto the fake face.
Apple has been touting its FaceID as the most advanced mobile security system since the advent of iPhone X. The company has claimed that the facial recognition tech is more secure than the TouchID, but evidence keeps landing continuously to prove otherwise. The video also did not showcase the original Face ID enrollment process - Bkav could have easily registered the mask as the original user.
"With this new research result, anyone can be "cloned" to make a "twin" mask of himself/herself", Bkav wrote in a blog post.
Meanwhile, Apple also demonstrates how Face ID adapts as your face evolves - whether it is due to new glasses, makeup, or hairstyle: iPhone X recognises you, even when you change your look.
Ever since the iPhone X launched on November 3, people have been hard at work trying to fool Face ID.
Florida Teen sought in grandmother's death detained in Buffalo at Canadian border
Logan Mott is believed to be in south central Pennsylvania and a warrant is being issued for his arrest on a charge of auto theft. It is the same home where police have been investigating the disappearance of teen Logan Mott and French, his grandmother.
"About two weeks ago, we recommended that only very important people such as national leaders, large corporation leaders, billionaires, etc., should be cautious when using Face ID", said Ngo Tuan Anh, Bkav's vice president of cybersecurity.
In the video above you will see the mask is made up of stone powder with the 2D infrared images of the eyes taped to the mask which mimics a real face and is used to unlock the iPhone X. Face ID is enabled during the video to show that is in fact his real face used during setup and then unlocked via the mask.
It unlocked flawlessly twice in a row for the mask, which sounds worrying, and indeed Bkav reckons that based on this users shouldn't use Face ID to secure sensitive data or in business transactions.
In the same process as before, the iPhone X is placed in front of the new mask.
This is not the first time Face ID has been fooled. In its place we have Face ID, which allows the tenth anniversary iPhone to be unlocked with just a glance of someone's face. Real world attacks using this method would require an accurate scan of a victim's face-Bkav used a 3D scanning booth for their images-and we still don't know the exact details of how the mask was created.