From WIRED · Lily Hay Newman · · 1m 50s
Apple's HomeView skips FaceID for face recognition
Apple's new smart home device uses a different biometric system to authenticate multiple users, raising questions about security compared to its proven FaceID technology.
In brief
Apple's new smart home device uses a different biometric system to authenticate multiple users, raising questions about security compared to its proven FaceID technology. Apple's HomeView smart home device uses new person recognition technology instead of FaceID to authenticate up to six users, a departure that…
Quick answers
- Why not FaceID?
- FaceID works when a person stares at their device head-on from less than an arm's length away.
- What is the key takeaway from Apple's HomeView skips FaceID for face recognition?
- Apple's HomeView smart home device uses new person recognition technology instead of FaceID to authenticate up to six users, a departure that expands biometric security architecture but creates new vulnerability risks.
HomeView debuts Friday
Apple's HomeView is a smart home device that personalizes for up to six people, each connected to their own iCloud account. It uses face and voice data to switch between users while protecting privacy.
What HomeView lets you access
You can ask HomeView about your schedule and messages sent to you, but cannot access your roommate's travel plans or texts. The device checks your face and voice before granting access to your iCloud data.
Why not FaceID?
FaceID works when a person stares at their device head-on from less than an arm's length away.
Secure Exclave replaces Secure Enclave
HomeView uses Apple's Secure Exclave, a dedicated memory-protected space in recent processors, not a separate chip like the Secure Enclave. It handles video and audio data to evaluate who is in the room.
Where Secure Exclave appears
The Secure Exclave is in Apple's S11 chip for Apple Watch Series 12 and Apple Watch Ultra 4, and the A20 Pro chip for iPhone 18 Pro and iPhone Duo.
Apple's security argument
Apple used formal verification to vet the Secure Exclave microkernel. The company says it strengthens existing features like Hey Siri detection and governs camera and microphone indicator lights to prevent attackers disabling them.
“Our goal is to keep ambient sensor data secure even against highly sophisticated attacks.”
Person recognition has limits
HomeView's person recognition is less comprehensive than FaceID and may be more susceptible to reconstructed three D depth map attacks and voiceprint attacks.
The bottom line
Apple's HomeView smart home device uses new person recognition technology instead of FaceID to authenticate up to six users, a departure that expands biometric security architecture but creates new vulnerability risks.
