Live data from Hacker News

FaceTime bug lets you hear audio of person you are calling before they pick up

9to5mac.com

291–300 of 458 posts

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#292
post #273

Earlier quoted context omitted.

Oh I’m not questioning the existence or importance of the bug. It’s important and a big screwup. However, I am extra sensitive to the degree to which twitter is being manipulated for all sorts of ends. Sometimes things look more than a bit fishy. Usually major bug reports don’t come from 2019’s version of egg avatar + letters/numbers username + very recent activity consisting almost entirely of political posts + past…

What possible motivation would anyone have for reporting a real bug of this nature like this? Other than, yeah, found a crazy bug.

Stock manipulation perhaps? Happens a lot with Tesla apparently, short sellers will pump up any negative story and try to get it into press. This person was making several attempts to get in contact with press after all, and a story about a teenager finding a big privacy bug in a company that publicly touts its privacy chops has ‘news at 11’ written all over it.

Personally I think a bug report story is not a particularly plausible strategy for such a thing - this person’s concern seems entirely genuine - but crazier things have been done for money. I’m relatively skeptical of complaints from companies about short sellers and bad press, but also recognize that stock manipulation happens a lot more than most ppl are aware of.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#293
On the 1st of November a friend shared with me a screenshot from the Instagram of a concerned parent explaining a situation in which her child was being cyber bullied, and it was clear from the content of the messages that the bully could her their private conversations.

I guess this bug has been know and abused for at least three months?

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#294
post #137

Earlier quoted context omitted.

iPhones already have a "mute" slider switch. When I first looked into iPhones (after years of Androids), my instant reaction upon seeing the slider switch was "Ah! FINALLY! I can feel at peace in the knowledge that software vulnerabilities are powerless to hack my camera or microphone!" Of course, stupidly, the slider doesn't "mute" my camera or microphone, but only my speaker. For Apple to modify this slider so that…

Frankly, I’m totaly in favour of hardware interrupt switches for the camera/mic - but I think I understand why it’s not likely to happen. First, to a lot of people it will look like admitting your thing is hackable, which makes it seem vulnerable. Second, now every time I accept a call I have to check this switch - sounds like a switch most people will leave in the on-position 100% of the time and then when it accide…

sounds like a switch most people will leave in the on-position 100% of the time and then when it accidentally gets flicked they’ll bring their phone to the Apple store because “it’s broken”.

laptops with hardware wifi and bluetooth switches. Took plenty of support calls about those.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#295

Earlier quoted context omitted.

Let's not forget https://www.cvedetails.com/cve/CVE-2013-1050/ and https://www.cvedetails.com/cve/CVE-2015-7496/ and https://www.cvedetails.com/cve/CVE-2017-8900/ (to a lesser extent). Check out https://www.cvedetails.com/vulnerability-list.php?vendor_id=... for more fun.

http://i.imgur.com/rG0p0b2.gif

But the Windows 95 login was just for logging into the network, not the computer

I think that if you hit Cancel there it would work just as well. You wouldn't get it logged into the domain though

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#296
post #230

Earlier quoted context omitted.

Oh damn, they can do it just like that? I thought FaceTime was a P2P thing... but it appears group FT requires Apple's servers?

Each person only uploading one copy of video in a multiparty situation is a huge win for quality on mediocre connections.

Skype used to be "P2P" where one party would act as the host in a group call.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#298

I'm always curious how a bug like this ships. I mean QA & Testing should catch it, sure. But even before then. Some engineer wrote code for FaceTime that has it open the microphone before the call is accepted. And transmit the audio over the network before the call is accepted. Who did that? And why? I'm not suggesting malice but I do wonder at the lack of defensive programming.

You’re curious how a complex piece of software can have a bug? Come on now. You’re either naive or being hyperbolic.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#299
post #260
post #236

Earlier quoted context omitted.

As someone who bought an iPhone specifically for privacy reasons, I'm not really upset about this. What I'm concerned about is passive, mass-scale corporate surveillance, not a one-off bug that allows an individual with mal-intent to listen through my microphone for a few seconds and also let me know about it.

Are you able to root an iPhone or use one without signing in with an Apple account (that's tied to a credit card, etc)? If not, then I believe the devices are still very much part of a mass-scale corporate surveillance network.

Of course you don't need an Apple ID.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#300

Earlier quoted context omitted.

Frankly, I’m totaly in favour of hardware interrupt switches for the camera/mic - but I think I understand why it’s not likely to happen. First, to a lot of people it will look like admitting your thing is hackable, which makes it seem vulnerable. Second, now every time I accept a call I have to check this switch - sounds like a switch most people will leave in the on-position 100% of the time and then when it accide…

Also some smartass regularly find out way to disrespect this physical button for some reason in order to play theirs ads at full volume while muted in the most inconvenient settings. Like say taking a dump a the office and all coworkers present hearing an add for monster castle crusher of the hustle dragon birds candy. TOTALY COUNTER PRODUCTIVE GUYS, FOR GOD SAKE STOP THAT SHIT!

Got downvoted for some reason, I guess thoses who never played a casual mobile game while on the loo had thrown the first stones.
Post reply on HN