Live data from Hacker News

Research shows how MacBook Webcams can spy on their users without warning

washingtonpost.com

91–100 of 241 posts

Re: Research shows how MacBook Webcams can spy on their users without warning

#91
post #5

I would be more concerned about the microphone. I can easily cover the camera with tape. Also, random pictures of me programming or reading HN are probably less damaging audio recordings of conversations I might be having.

My current Thinkpad has a physical switch to disable radios. I'd like to have a physical 'privacy' switch that cut the power to internal microphones and cameras. To be security aware, this has to be an auditable hardware power switch, and not just an interrupt/driver/bios combination that could be bypassed. It's also prefereable for security to have a an off-by-default switch, than an activity light you might not not…

That's unfortunately the exception rather than the norm. I have seen laptops with switches for WiFi, and camera obturators, but manufacturers hardly think about these things. It's obviously not an Apple problem only, but it certainly hinders usability to have physical switches. Yet, I really wished they'd make that standard for all media peripheral (and not just on PC, but any device coming with these features). That would however be easily considered as an admission of failure to provide a secure software environment to their customers, and they might not like that aspect of it.

Re: Research shows how MacBook Webcams can spy on their users without warning

#93
post #30

I want hardware on/off switches for camera, microphone, wifi, bluetooth, and maybe even external speakers. These should be power switches, not switches that make a polite request to firmware for the firmware to act as if the devices are off.

I'd pay someone $10 if I could figure out a way to make sure that my macbook never plays the "I AM NOW TURNING ON" sound.

    sudo nvram SystemAudioVolume=0
If this works for you, please donate the $10 to Archive.org.

Re: Research shows how MacBook Webcams can spy on their users without warning

#94
post #17

Does anyone know of how to secure against this type of thing (other than tape)?

Buy hardware and software you, as the paying customer, remain allowed to control.

This doesn't help here. The computer's control of the light is the problem--it's what lets the malware turn it off.

Re: Research shows how MacBook Webcams can spy on their users without warning

#97
post #5

I would be more concerned about the microphone. I can easily cover the camera with tape. Also, random pictures of me programming or reading HN are probably less damaging audio recordings of conversations I might be having.

My current Thinkpad has a physical switch to disable radios. I'd like to have a physical 'privacy' switch that cut the power to internal microphones and cameras. To be security aware, this has to be an auditable hardware power switch, and not just an interrupt/driver/bios combination that could be bypassed. It's also prefereable for security to have a an off-by-default switch, than an activity light you might not not…

My current ThinkPad (T400) has the Mic, fingerprint scanner and webcam disabled physically. They're easy to get into and unplug.

Agree entirely though.

I'd rather like a physical off switch as well like the original IBM PC (the big red lever)

Re: Research shows how MacBook Webcams can spy on their users without warning

#98
post #9

Honestly, I don’t understand why it’s so difficult to create a camera chip not susceptible to any software hack. The camera sensor needs electrical current to work. Simply place the LED inline or in parallel to the camera and you are done. Any time current is sent to the camera sensor, the LED cant help it but light up. My knowledge of electronics is limited, but I know for a fact that this can be achieved without th…

Having an inline LED is still a bit over-engineered in my opinion. The earliest standalone webcams, for instance Logitech models and the IndyCam that came with the Silicon Graphics 'Indy' workstation, had a 'door' that you could slide over the lens when not in use. Lenovo had this on their all in one PC's a few years ago but I don't think they kept that feature. What was wrong with the slide-across lens cover? You wo…

> Having an inline LED is still a bit over-engineered in my opinion.

Overengineering usually refers to something that's not simple or elegant or a solution which represents more effort than the problem calls for. None of those factors seem to apply here.

Re: Research shows how MacBook Webcams can spy on their users without warning

#100

Earlier quoted context omitted.

I'm assuming this is a dig at Apple. Care to show that any other laptop manufacturer's webcams are impervious to having their firmware overwritten?

It's a dig at anything closed.

Why would open source hardware not be vulnerable to this sort of attack?
Post reply on HN