The flaw, discovered by researchers at Syss (via The Register) allows Windows Hello to be spoofed on Windows 10 releases older than the Creators Update (build 1703). However, even if your PC is currently running the Creators Update or Falls Creators Update, facial recognition needs to be set up again to circumvent the flaw.
Matthias Deeg and Philipp Buchegger, the researchers who discovered the attack, say that Windows Hello can be fooled by using printed photos of an authorized user that has been modified. Using a frontal photo taken with a near-infrared camera, facial recognition on the affected Windows 10 versions could be fooled. Deeg and Buchegger tested the spoofing attack with Windows Hello's standard setup, as well as with "enhanced anti-spoofing" enabled, and were able to bypass both. From the report:
Both, the default Windows Hello configuration and Windows Hello with the enabled "enhanced anti-spoofing" feature on different Windows 10 versions are vulnerable to the described spoofing attack and can be bypassed. If "enhanced anti-spoofing" is enabled, depending on the targeted Windows 10 version, a slightly different modified photo with other attributes has to be used, but the additional effort for an attacker is negligible. In general, the simple spoofing attack is less reliable when the "enhanced anti-spoofing" feature is enabled.
While worrying, the attack requires a pretty specific set of steps to work. The best way to stay protected is to make sure you're PC is current with either the Creators Update or Fall Creators Update. Once updated, you'll want to set up Windows Hello's face recognition from scratch to guard against spoofing.
You can view demonstrations of the exploit in action in the videos below.
Thanks, Daniel, for the tip!
Minecraft Dungeons: Best Rogue / Assassin / Ninja-style Build Guide
Take on the role of a poisonous spider in Minecraft Dungeons with this best ninja build guide!
Here are five possible directions a Halo spin-off game might take
A recent 343 Industries job listing suggests that a new Halo spin-off title may be on the horizons. Here are five possible directions we think a game like that might go in.
Intel Optane memory hits snag with Windows 10 May 2020 Update
If you've been experiencing errors with your PC's Intel Optane memory after updating to the Windows 10 May 2020 Update, you're not alone. Intel has confirmed the problem and says it is working with Microsoft on a fix.
Best Windows 10 Wallpaper Apps and Websites in 2020
You stare at your desktop wallpaper all day, so why leave it boring or as the Windows 10 default wallpaper? These websites and apps will help you keep your desktop fresh and beautiful.