Windows Hello bypassed while sleeping - Secure?

[ttsoldier]

I was sleeping the other day, my friend was using my surface pro. When i got up he was still using it. We started to talk and he said something about him having to reboot it.

So I asked him how did he unlock the device? (he doesn't know my pin). He said he just pointed the camera at my face while i was sleeping and it unlocked. he did say it took a few tries but it eventually did log in.

I thought Windows Hello scans your iris? My eyes are closed when I am sleeping.

What's up with that?

 

[elindalyne]

Surface Pro 4/Surface book use RealSense cameras that do 3d Facial recognition. The Lumia 950s do iris recognition.

 

[ttsoldier]

Surface Pro 4/Surface book use RealSense cameras that do 3d Facial recognition. The Lumia 950s do iris recognition.

Ah. Ok. Thanks for the clarification

 

[BaritoneGuy]

Ah. Ok. Thanks for the clarification

Pretty clever of your friend.

 

[ttsoldier]

Pretty clever of your friend.

Clever indeed. Sorry for those with paranoid girlfriends and things to hide on their devices. hahahaha

 

[CryptDevelopment]

Thanks for the info elindalyne now this helped me as well.

 

[slyronit]

Hmm. They should add an option to enable unlocking only when the eyes are open. I am sure it can tell whether they are, or not.

 

[ttsoldier]

Hmm. They should add an option to enable unlocking only when the eyes are open. I am sure it can tell whether they are, or not.

Agreed

 

[Tarwinia]

In hindsight this and like a clear oversight. I think I remember reading that some earlier recognition used the subject blinking as a security measure to avoid people using someone's photo to bypass the security. Something similar would be good here too.

 

[Lee Power]

Im a Lumia 950 user, Windows hello always asks for the phone pin after phone switch on / reboot. Once the phone pin has been entered Windows hello takes over next time you want to unlock the phone. Maybe Microsoft need to update Hello on other devices to require pin / password entry on start up / reboot?

 

[ttsoldier]

Im a Lumia 950 user, Windows hello always asks for the phone pin after phone switch on / reboot. Once the phone pin has been entered Windows hello takes over next time you want to unlock the phone. Maybe Microsoft need to update Hello on other devices to require pin / password entry on start up / reboot?

That's an interesting suggestion.