Live data from Hacker News

FaceTime bug lets you hear audio of person you are calling before they pick up

9to5mac.com

341–350 of 458 posts

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#341
post #334
post #106

Earlier quoted context omitted.

That's computing's tick tock release pattern in general. Tick new features, tock optimizes performance.

Then, how do you explain that the last update improved performance a lot on older devices ? Last time I've checked there was no hardware upgrades in the downloaded update...

Where did GP say anything about hardware?

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#342
post #292

Earlier quoted context omitted.

What possible motivation would anyone have for reporting a real bug of this nature like this? Other than, yeah, found a crazy bug.

Stock manipulation perhaps? Happens a lot with Tesla apparently, short sellers will pump up any negative story and try to get it into press. This person was making several attempts to get in contact with press after all, and a story about a teenager finding a big privacy bug in a company that publicly touts its privacy chops has ‘news at 11’ written all over it. Personally I think a bug report story is not a particul…

@foxnews sure has “news at 11” written on it.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#343

Earlier quoted context omitted.

This is a very naive estimation of what might happen when someone has access to all your running software. Since it is linux, it loads executables into memory and is able to run them even when they are deleted along with runtime dependencies. Anything that caches anything to anywhere other than disk will be accessible. Your memcache, your redis, some databases, keychains, your non-userdata browser sessions.

I'm aware of that but it's a moot point because you'd be popping the storage device back in anyway. Which is why I didn't address that in my previous comment. In any case, half the examples you've provided there are server specific and you really shouldn't be allowing untrusted physical access to your servers (nor running Xorg to be honest).

While I do agree, a lot of ideas here are still laden with hindsight.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#344

I'm always curious how a bug like this ships. I mean QA & Testing should catch it, sure. But even before then. Some engineer wrote code for FaceTime that has it open the microphone before the call is accepted. And transmit the audio over the network before the call is accepted. Who did that? And why? I'm not suggesting malice but I do wonder at the lack of defensive programming.

I agree this should have been caught in QA/dev testing. However, I would bet a dollar this wasn't "Some Engineer" deciding to do it this way. This design was the culmination of some back and forth discussions and it is this way for a sound (no pun) reason.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#345
post #255

I'm always curious how a bug like this ships. I mean QA & Testing should catch it, sure. But even before then. Some engineer wrote code for FaceTime that has it open the microphone before the call is accepted. And transmit the audio over the network before the call is accepted. Who did that? And why? I'm not suggesting malice but I do wonder at the lack of defensive programming.

My guess is that it’s an unfortunate combination of several problems: - audio and video capture has to start going before call is actually established at signaling level, in order to minimize call establishment delay. Audio maybe going through Bluetooth, for example, and waking up Handsfree mode of BT may take 1-2 sec - most of the group calling functionality was developed by a separate team, and group calling signal…

They were trying to reduce a latency and accidentally made it negative.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#346

I'm always curious how a bug like this ships. I mean QA & Testing should catch it, sure. But even before then. Some engineer wrote code for FaceTime that has it open the microphone before the call is accepted. And transmit the audio over the network before the call is accepted. Who did that? And why? I'm not suggesting malice but I do wonder at the lack of defensive programming.

The code involved is a lot more complicated, involving a lot more pieces written by different teams working in concert with each other. There's not a single routine that takes the steps you describe that got a few lines out of order or something.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#347

Earlier quoted context omitted.

http://i.imgur.com/rG0p0b2.gif

But the Windows 95 login was just for logging into the network, not the computer I think that if you hit Cancel there it would work just as well. You wouldn't get it logged into the domain though

Yes - from what I recall there was not even a pretense of security. Everything was just unencrypted FAT (VFAT rather than FAT32) and if you logged in as one user all other user's data was clearly visible - it was just a means to have your own user workspace and customisations applied. Windows 95 and everything up to (not including) XP was a toy OS for home users ... If you wanted "grown up" features you had to go for NT.

Re: FaceTime bug lets you hear audio of person you are calling before they pick up

#349
post #255

I'm always curious how a bug like this ships. I mean QA & Testing should catch it, sure. But even before then. Some engineer wrote code for FaceTime that has it open the microphone before the call is accepted. And transmit the audio over the network before the call is accepted. Who did that? And why? I'm not suggesting malice but I do wonder at the lack of defensive programming.

My guess is that it’s an unfortunate combination of several problems: - audio and video capture has to start going before call is actually established at signaling level, in order to minimize call establishment delay. Audio maybe going through Bluetooth, for example, and waking up Handsfree mode of BT may take 1-2 sec - most of the group calling functionality was developed by a separate team, and group calling signal…

> leads to either remote side think that the call was answered

Maybe that's triggered by adding your own number? Since you're clearly on the call already, your own number is obviously going to answer immediately and that kicks the whole call into "active" (since you presumably want a call to become active when more than one person has answered) without considering that you've actually got A+A+B instead of A+B+C.

Post reply on HN