Earlier quoted context omitted.
There's lots of people who aren't "serious about video meetings" but still want to be able to do a face-to-face chat with family or whatnot.
So get a $15 USB webcam.
Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
181–190 of 554 posts
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#182Earlier quoted context omitted.
I believe that it’s not literally hardwired in the sense that powering up the camera also powers up the camera LED, and instead this relies on logic in the hopefully un-flashable camera+LED firmware. Someone correct me if I’m wrong. You need some logic to enforce things like a minimum LED duration that keeps the LED on for a couple seconds even if the camera is only used to capture one brief frame. I have a script th…
I happen to have some first-hand knowledge around the subject! In 2014 someone did a talk[0] on disabling the camera on some older Macbooks. It was fairly trivial, basically just reflashing the firmware that controlled the LED. I worked on the security team at Apple at the time and in response to this I attempted to do the same for more modern Macbooks. I won't go into the results but the decision was made to re-arch…
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#183I thought the whole point of these camera LEDs was to have them wired to/through the power to the camera, so they are always on when the camera is getting power, no matter what. Having the LED control exposed through the firmware completely defeats this.
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#184I thought the whole point of these camera LEDs was to have them wired to/through the power to the camera, so they are always on when the camera is getting power, no matter what. Having the LED control exposed through the firmware completely defeats this.
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#185I assumed that most if not all of these webcam LEDs are wired in series with the power to the camera itself. Which then makes it impossible to disable them. Who designs this LED to be software addressable?
I'm not an EE by trade, but I personally wouldn't want to put a CCD in series with an LED with god-knows-what Vf tolerances. Then again, I'd bet that nearly all laptop webcams come as off-the-shelf modules with their own internal regulators for the CCD anyway. So maybe it wouldn't matter. I'll bet it went something like this: As originally specified, the user need was "LED privacy indicator for the webcam." Product m…
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#186Earlier quoted context omitted.
Interesting, my work HP Probook does not have that functionality. I wonder why HP chooses to do this only for some laptop lines.
I suspect most people don't want it. I can imagine lots of people calling customer service "Q: why doesn't my camera work?", "A: Did you open the cover?" There's just a valid an argument to do the same for phones. How many phones ship with camera covers and how many users want them? You can get a stick on camera cover for $5 or less if you want one. I have them on my laptops but not on my phone. They came in packs of…
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#187Earlier quoted context omitted.
I believe that it’s not literally hardwired in the sense that powering up the camera also powers up the camera LED, and instead this relies on logic in the hopefully un-flashable camera+LED firmware. Someone correct me if I’m wrong. You need some logic to enforce things like a minimum LED duration that keeps the LED on for a couple seconds even if the camera is only used to capture one brief frame. I have a script th…
I happen to have some first-hand knowledge around the subject! In 2014 someone did a talk[0] on disabling the camera on some older Macbooks. It was fairly trivial, basically just reflashing the firmware that controlled the LED. I worked on the security team at Apple at the time and in response to this I attempted to do the same for more modern Macbooks. I won't go into the results but the decision was made to re-arch…
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#188Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#189Earlier quoted context omitted.
This only works on audio chipsets that allow pin retasking. Which is, coincidentally, all Realtek chipsets that are present in every PC... (you also need to plug the speaker directly, mostly limiting it to headphones and laptop speakers)
Even where it works, speakers are much worse microphones that dedicated microphones, and so the amount of data that can be gathered is low. Why bother when you probably have a microphone on the same PC that can capture far more sound?
Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
#190My laptop just has a little plastic cover you slide over the lens when not in use. Why isn’t this simply more common?