Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This is the problem with sandboxes and app stores. People are trained (by Apple) to think that their devices are safe from spyware, malware, viruses and malicious app activity in general. This is not the case.

Uber was tracking people before and after journeys & tracking IEMI numbers, Path was and Foursquare is uploading a user's entire address book and contacts to their servers, and the Chinese App Store was infected with malware through Xcode - including apps like WeChat and Angry Birds 2.

Apple creates a false perception that any app on the App Store is safe, while allowing apps to ask for permissions (or permission levels) that are entirely unnecessary for the app to function.
 
Some yahoo is going to hide some code in an app to detect when someone is running around in their birthday suits and then upload the pictures. Then, of course, Apple will get blamed for it for not screening the app properly and it will be an awful mess with a lot of hurt people. :(

And you think Apple would be the real victim in that situation? Jesus...
 
Hopefully something as simple as "Only when using the app" would limit this to times I assume it could be happening.
 
This would be an issue if it were in the background. But in this case I dont see the big deal..Turn it off if the App asks for permission for no good reason.
 
  • Like
Reactions: cyanite
1) if this is possible, surely Apple would catch this when screening apps before allowing them on the App Store?

Many apps regularly request permission to the camera in iOS, allowing users to post photos from their Camera Roll, take a picture within the app without leaving it, and more.

2) Clarify: some apps request access to the camera roll (or your photos), which does not grant them access to the camera, only previously taken photos, correct? You touch the camera icon and then it requests access to your camera.​

It needs to be running in the foreground so what's the issue? The most it can do is see your face while your using it or the ground or a table behind the phone.
3) surely this story will go out with major FUD, and many will miss the fact the app must be in the foreground, and people will buy camera covers.

So the real question is, does this guy sell camera covers? If so, he could be sued for defamation, and whatever the legal term is for when one points out a flaw in order to benefit financially?
 
  • Like
Reactions: cyanite
Really nothing new here. There are lots of things that could be done on both iOS and Android by developers who are not honest.
[doublepost=1509023535][/doublepost]
Or, like laptops, have a little hard-wired-notification-of-webcam-enabled LED.

This can be disabled. The LED indicator is a false sense of security.
 
So will people put tape over the front facing camera on their phones like they do on their computers?
 
Really nothing new here. There are lots of things that could be done on both iOS and Android by developers who are not honest.
[doublepost=1509023535][/doublepost]

This can be disabled. The LED indicator is a false sense of security.

Mine is in series to the power signal line for the camera module, can't speak for other laptops.

WatchDots could market a new product...

iSight Camera dots! I never take selfies or use the front camera anyway.
 
  • Like
Reactions: cyanite
Another option for addressing the issue:

  • An app must show an image of what the camera sees whenever the camera is active
That is a good idea in theory, but actually enforcing that would be pretty difficult, what if the app has a fullscreen camera UI that has popups that blur the camera? You could say it just has to be a view in the view hierarchy, but then you could just put the view underneath all your content. Or put it there and scale it to 2 pixel widths and stick it in a corner.

I think the most ideal solution would be the hardware LED. But a simple solution could be just adding a software "camera active" icon to the status bar. Apps that hide the status bar could get away with it, but it could also show when you pull down notification center, so apps that did that could still be found out.

To be honest, it is very likely that someone like Facebook is already doing this. Their app is huge, they could very well have machine learning modules in there to judge your expressions locally while you are browsing content.
 
Another option for addressing the issue:

  • An app must show an image of what the camera sees whenever the camera is active

excuse my ignorance...but,..

that does not address the issue of the image presented being taken to the cloud and uploaded elsewhere without the users explicit permission to initiate that act.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.