Any iPhone App with Camera Permission Can Secretly Record You

Megalith

24-bit/48kHz
Staff member
Joined
Aug 20, 2006
Messages
13,000
Google engineer Felix Krause has detailed an alarming privacy setting in Apple’s iOS that enables iPhone apps with camera permission to surreptitiously take photos and videos of you – without your knowledge. All of this without any notice or indication that your iPhone is snapping images of your face. No sound, no light, no LEDs.

The researcher notes that granting camera permission will enable apps to access both the front and the back camera of your device, photograph and record you at any time the app is in the foreground, upload this content immediately, and run real-time face detection to read your facial expressions.
 
I wonder if this is an inherent characteristic of phone apps that they seem to always be running. I get 'kindle has crashed' or some such all the time when I've previously closed the app. I'm beginning to think I have very little concept of wth it's doing in the background.
 
Lol the world is ending guys, no one is safe.

I already have a shitload of clients that I notice have black tape covering their front cameras on their phones. I don’t get it.

Getting the latest and greatest smart phones only to cover the cam?
 
Uhh.. no shit? That's why you nuke apps that ask for camera access if they don't have obvious camera features?

I'm pretty sure this is worse on android where every app you download comes with a warning that it's going to need access to everything and your first born child to let you operate a shitty pay 2 win shovelware game.
 
I wonder if this is an inherent characteristic of phone apps that they seem to always be running. I get 'kindle has crashed' or some such all the time when I've previously closed the app. I'm beginning to think I have very little concept of wth it's doing in the background.


So many phone apps continue to run in the background to collect data. That's why being vigilant about permissions is important.

Not sure about iOS, but Android now does a pop-up to grant/deny permission to use a certain feature (camera, file system, location, etc.). There's a lot of apps that request permissions and seemingly work fine when denied. So kinda wonder what else they're trying to do.
 
Uhh.. no shit? That's why you nuke apps that ask for camera access if they don't have obvious camera features?

I'm pretty sure this is worse on android where every app you download comes with a warning that it's going to need access to everything and your first born child to let you operate a shitty pay 2 win shovelware game.
I get adds on chrome about conversations i have had around my phone so yea i think google is worse.
 
Does it matter who found it? That's like complaining about a Linux engineer finding and disclosing Windows exploits.
Maybe the Google engineer is just pissed because Google's been doing this for years with the NSA on the other side of the data stream.
 
I get adds on chrome about conversations i have had around my phone so yea i think google is worse.


Bullshit.... If android was recording everything and sending it to google, 1- It would bee seen in the source code. 2- That would be WAY bigger news than this and be on every security site/blog.
 
Bullshit.... If android was recording everything and sending it to google, 1- It would bee seen in the source code. 2- That would be WAY bigger news than this and be on every security site/blog.
I don’t know, but there have been several times this has happened to me too.
 
Honestly, I kind of assumed this was the case for all phones already. Any app you give permission to the camera could theoretically misuse that permission...
 
  • Like
Reactions: naib
like this
Honestly, I kind of assumed this was the case for all phones already. Any app you give permission to the camera could theoretically misuse that permission...
Exactly. It still amazes me when people expect any form of privacy on the internet. or from internet connected devices.
 
I don't think anyone is :( but if you consider anything that is exposed to an internet facing device is out there, how you behave differs. Anonymity comes back to bite people (recent MP in the UK), applications being buggy or snoopy, big providers having breaches...
 
Jesus HardOCP get some new Apple hate material seriously... any phone where you give app permission to control hardware has this capability
 
I can hear and see everything your doing right now, even after I already made this post and you're reading this in the future.

No, I'm not full of shit.

Nope, not kidding.

Sit up straight and get your hand outta your pants, you're reading tech news, what's the matter with you.
 
Sit up straight and get your hand outta your pants, you're reading tech news, what's the matter with you.

th.jpg



Meh. No big deal. I'm not going to be around my phone if I'm doing something illegal or whatever. Or at least that illegal that it would cause someone to want to listen on my conversations. For those type of things, I'd use a shitty flip burner phone. Theoretically speaking. I don't engage in illegal activities like that.
 
Do any of the 3 letter agencies have an app in the app store by any chance that require this permission? I'm sure its not a bug.
 
There is a bank in my city that not only uses MDM to disable camera access, but they also take a leather punch and smash the cameras on company issued cell phones. That's one way to fix the glitch.
 
This is something that pretty much everyone who has ever written an iPhone app that uses the camera knows about. I'm frankly surprised that anyone is surprised, That's probably why no one has bothered mentioning it before. Camera permission means they can access the camera, seems innocuous if when you're the one writing the program. I do understand why people would be upset, maybe Apple should add a light next to the camera.

P.S. All the program I wrote did was use the camera to scan 2d and 3d barcodes, that the user would intentionally hold up to the phone.
 
Back
Top