A hack demonstrates that the iris scanner in Samsung’s new flagship smartphone could unlock the device when presented with a photograph of the owner’s eye.