- open the deceased's eyes
- position the eyes so that Face ID thinks the eyes are "looking into" the iPhone
- pump warm blood/liquid into the deceased's face in order to fool the infrared temperate monitoring
Seems possible, but sounds like an awful lot of work unless you did something that law enforcement really wants to look into.
And from my spy movie expertise:
Turn the heater in the room full blast to achieve the needed thermal level (The Saint, Sneakers)
It's not that OP worries they might be doing something sketchy enough that law enforcement would go through those lengths. The issue is that Face ID's difficulty to crack is a function of time, not knowledge. Thus, it is not the holy grail we seek, and if you have anything of interest on your phone, whether political, corporate or just illegal, it's not even an option if you wish to secure your system.
I’m much more worried about a court compelling me, while alive, to provide my face or fingerprint. They can easily force biometrics out of me, but they’d have to torture a passcode out. Even if I have nothing to hide and/or give it up in the first five minutes at least that was my choice and not one made for me.
You might have something on your device that incriminates another, living, person.
Could access Employee/Employer/Client Data?
Open the password manager with access to vendor/company login info, ssh keys. Could access company systems with access to more data. Could change data/commit code etc to those systems remotely/temporarily.
Be able to open 2 factor apps that could enable access to financial info (tax/theft etc), which could hurt loved ones/heirs. If you were an investment advisor/trader the offender could make trades/wire money on client accounts.
I think law enforcement is one concern but a wealthier/powerful user could attract other parties.
If you died over a long holiday weekend or vacation, that access could go undetected long enough to have consequences.
Yeah, but you probably want to avoid creating software-based incentives where some people would prefer other people to be dead.
No, I'm not aware of any thermal sensor used for FaceID. It builds an image of your face using an IR camera paired with an IR projector just like the first generation Kinect (made by PrimeSense that was bought by Apple in 2013). Keep in mind that this is near IR, not far IR that's used in thermal imaging.