Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

github.com

Post reply on HN
Print view View original

531–540 of 554 posts

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#531

Post by shermantanktop »

ddalex wrote: post #357
oneshtein wrote: post #347

Earlier quoted context omitted.

You can buy/print and stick a physical «webcam cover»[1] manually on your notebook or phone. My current notebook, manufactured in 2023, has very thin bar on top of screen with camera, so I need a thin, U-like attachment for the switch, which is hard to find. [1]: https://www.printables.com/model/2479-webcam-cover-slider

Am I the only one that is not worried at all about the camera and super concerned about microphones ? The camera may see me staring into the screen, woo hoo. The microphones will hear everything I discuss, incl. confidential information. There is no physical microphone cover there, is it ?

When I have to do faux-2FA auth using numeric codes sent by text or email, I sometimes catch myself quietly saying the numbers. A microphone would by quite handy for an attacker, even if they couldn’t see all my network traffic.

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#533

Post by 71bw »

mass_and_energy wrote: post #440
71bw wrote: post #424

Earlier quoted context omitted.

I went the "batshit insane" route and my microphone hole is plugged in with some clay. It did most likely physically damage it forever, but at least I now know it's OFF for good.

Why not shut it off in the bios?

As if there's an option to do so...

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#534

Post by runeks »

I wish laptop webcams were designed like this: when I want to turn off my webcam I slide, with my finger, a piece of plastic that physically covers the webcam. This simultaneously turns off the LED, which is always on unless the camera is covered by the plastic.

As an extra feature, firmware could hook up to the software that uses the webcam to send a "hang up" signal when I turn off the webcam. That way I don't have to find some button in whatever software the person I'm having a call with wants to use — I just "turn off" my webcam.

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#535

Post by znpy »

daghamm wrote: post #422
znpy wrote: post #410

This is nothing new, i remember the same headline but on macs for like ~5-6 years ago?

Yes, and there was a case of a guy recoding young women and sextorting them. BTW, I would assume that X230 users are the type of people who install physical shutters on their webcams.

i have a physical shutter on my work-issued bacbook pro

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#536

Post by amatecha »

wkat4242 wrote: post #209

I'm surprised how much these X230s are still being used. People who love real keyboards love them. Personally I didn't think Lenovo's later keyboards were too bad. The one on my T490s was wonderful. However since my work moved to the T14s series, the keyboards have become terrible. The key movement range is too low now, and the feel is crap. It's too bad because Lenovo was the last holdout which still had decent keyb…

Yeah there are at least two X230's powered on in my home as we speak. To me that was the last good keyboard. I got an X250 and it's not even close. Same with T480… really disappointing. Using the X230 (and X220) is always a pleasure with the solid-feeling keyboard that makes it easy to type accurately on. I mis-position my fingers on the newer keyboards and make typos on them frequently because it's just one big flat surface (or feels as such).

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#537

Post by II2II »

jstanley wrote: post #268
II2II wrote: post #262

Earlier quoted context omitted.

> and no firmware is involved in enforcing the LED stay on for 3 seconds after a single frame is captured. I may be the oddball here, but that 3 second duration does not comfort me. The only time I would notice it is if I am sitting in front of the computer. While someone snapping a photo of me while working is disconcerting, it is not the end of the world. Someone snapping photos while I am away from the screen is m…

OK, but then what? Leave the LED on for 24 hours after you've captured a single frame? At that point the LED isn't really indicating camera usage because you'll just get used to seeing it on all the time whether the camera is in use or not.

A ranfom thought, that probably won't cover all cases: a second LED or a colour LED. One LED/colour indicates the camera is active, the second can be on for a longer period of time (and perhaps dim as time goes on). I prefer the second LED option since it is better for us colourblind folks, though I suspect there would be more resistance to the idea.

And, of course, covers are an option.

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#538

Post by neop1x »

throw646577 wrote: post #378
nine_k wrote: post #351

Earlier quoted context omitted.

Pray read the third paragraph of my reply :) It specifically mentions a way to make the LED be lit for long enough.

Which is not an adjustable method -- without changing the hardware design later in production to just tweak a delay -- and surely causes the LED to slowly fade out?

If fade out is such a big problem (which it isn't IMO) there are cheap regulator ICs which can provide constant current.

Re: Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

#539

Post by steelframe »

Speaking as someone who owns 3 Framework laptops, I was not disappointed to find Framework mentioned no fewer than 13 times in this comment thread. Assuming all goes according to plan with the moderation on this comment, now Framework is mentioned at least 16 times!
Post reply on HN