Microsoft’s ‘Enterprise-Grade’ Face Authentication Fooled By Photo
Although the issue has been patched through Microsoft's Fall Creators Update, outdated versions of Windows 10's Hello facial recognition can be spoofed with a photo, a German security firm said this week.
With some extra work as little as a low-resolution, laser-printed photo taken with a near infrared camera can be used to trick a Hello-capable PC, SySS explained. It demonstrated the problem in a series of YouTube videos.
People with the Fall Creators Update installed should still reconfigure Hello in order to block hackers. Anyone trying to break into a computer via the flaw must, of course, have physical access.