Slashdot Mirror
iPhone Takes Screenshots of Everything You Do
The_AV8R writes "Jonathan Zdziarski showed that every time you press the Home button on your iPhone, a screen capture is taken in order to produce a visual effect. This image is then cached and later deleted. Zdziarski says that there have been cases of law enforcement looking up sex offenders' old data and checking recovered screenshots." This revelation occurred in the midst of a webcast on iPhone forensics, demonstrating how to bypass the iPhone's password security (not trivial, but doable). Video from the talk is not online yet but is promised soon over at O'Reilly.
Therefore, forensics experts have used this security flaw to successfully nab criminals who have been accused of rape, murder or drug deals, Zdziarski said.
iPhone: the tool of choice for rapists, murders, and drug dealers!
Joking aside, the article is puzzling and it reeks of FUD: if the iCrooks were bad enough to get the authorities to actively track and sieze their data then they deserve to be caught for being too stoopid to buy disposable phones in cash from 7-11. Even Johnny dormroom pot- dealer knows that!
Item 1:
Smart crooks use dumb (disposable) phones.
Dumb crooks use smart phones.
Faster! Faster! Faster would be better!
What type of incriminating things are sex ofenders doing with their iPhones.
If it's dead, you killed it.
Errr, it's not phoning these screenshots home. You must have a problem with .bash_history too, right? Caching your keystrokes! OMG!
-mkb
It's pragmatic to not press the home button when doing home invasions or killing people, I guess.
The dangers of knowledge trigger emotional distress in human beings.
Give the concerned users an option of turning off the "shrinking screenshot" animation that occurs when the Home button is pressed (which is why the screenshot is cached in the first place).
So it takes a screenshot for some effect? Is there even a way to do this without taking a screenshot? A way that is easy enough to be performed on a smartphone?
And what did you expect from Apple? That every bit of data that was discarded is overwritten ten times? Jeez, I enjoy bashing big companies as much as the other guy but now they're looking too far. Remember, it also saves your web history, every picture you took, every file you opened everything you did somewhere...
As long as there are slaughterhouses, there will be battlefields.
It turns out that you browser will store all the information needed to recreate the web pages you visit! Not just a screenshot! This critical flaw appears to have present for years in all known browsers! The end is near!
Seriously? Come on. I know ./ likes to post anything related to the iPhone, especially if it involves "spying", but this is pretty uninteresting. Security is traded for speed and features on a daily basis, including places where do so presents a major risk (*cough*Outlook). This is really not too surprising since it trades at most a little privacy in exchange for a neat effect; what would you expect Apple's iCandy to do?
It's trivial to disable logging to .bash_history. What about for this?
Tag this article as fud, because that's what it is. Any excuse to bash apple and/or iphone.. Really, if we're going to get upset about this, let's get upset about browser caching, cookies, history.. etc etc
Don't forget the page file. The horror; your computer is constantly taking screen shots of your applications ram and storing them on the hard drive!
it makes me wonder why there is no 'badtitle' tag.
It doesn't take a screenshot of everything you do, just when you hit the home button.
Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
Sure, if you overwrite your firmware (jailbreak), enable SSH access to the phone, and then NOT change your root password. Quite frankly, you deserve it at that point.
Sounds like yet another sensationalist (and completely inaccurate) headline pointing to a non-story. Unless some pervert is hits the home button while trying to take a (crappy, borderline-useless unless it's being done in full daylight) picture of himself raping a kid, AND law enforcement not only knows to look for this cached file, I don't really see this being an issue. I suppose it could possibly be used as supplemental evidence when a case is being built up, but the actual AIM chat logs, sent emails, phone call history (all of which are far more accessible) and such would be far more potentially incriminating.
How are sites slashdotted when nobody reads TFAs?
I _am_ Jonathan Zdziarski and even I don't understand why this is news.
This was a side note I mentioned the other day, and has been something I've been grousing about for over a year. It's unnecessary, and a bit of a privacy leak that can be exploited by forensic examiners, but hardly news for the reasons already stated in the comments.
I had a glitch occur that put one of these screen shots in my photos collection. I was wondering what kind of glitch would have generated a screenshot. Now that is partially explained.
I wrote a little app to fill the cache with screenshots of the IRS web pages. Anyone tries to investigate me, they'll have to carefully examine Publication 936, the instructions for Schedule F1, the guidelines for reporting "nanny" wages, and the like. Even if they aren't literally bored to death, they definitely won't want to look any further.
You can with the iBeer app.
(sorry, I tried to find the link)
The phone swaps an image to the disk so it can later be used in compositing. It's nothing new you know. Virtual memory's been around for aeons, and looking through an unencrypted swapfile to find incriminating information isn't exactly new either.
Those using pirated Tinysoft signatures(TM) are a real threat to society and should all be thrown in jail.
You'll no doubt be shocked to learn that even though you might empty your Recycle Bin there are some thing that anyone with physical access to your computer MAY be able to recover.
Thank you, that's the point. I DO know that about files *I* create and *I* delete and I can delete them securely if I choose to. What I did NOT know is that something is capturing screenshots of what I am doing and saving them without my knowledge. Generally this sort of a behavior is reserved for spyware, rootkits and other malware. I realize it is not intended as such, but neither was the Sony DRM rootkit a while back.
I would guess most people would have an issue to have a keylogger installed on their computers. This is no different..
(the word may is in all caps for the imbeciles reading, and because some of us are unable to detect when we are being patronizing)
Ok, but there MAY be something vaguely self-referential about that....
-Em
RelevantElephants: A Somatic WebComic...
This fool doesn't even present any evidence that this 'screenshot' is -ever- even written to storage. Sure, it has to be in RAM to be shown zooming away, but the same thing applies to showing anything on the screen at all. Just because it saves processing power to capture an image instead of zooming the live app like OS X does, doesn't imply that the image ever leaves volatile RAM.
- written from my iphone.
I can see a situation in which a phone *might* make sense (kid works a late shift, has an unreliable car, etc... But I cant see the wisdom in getting a kid the iPhone or any other upper level phone. If a kid works and uses their own money thats all well and good but its way to much to give a kid because 'they need one'.
"Ahh! Arrogance and stupidity in the same package, how efficient of you!" --Londo Molari
Jealous of what, exactly? Kids sending SMS text at 100s the cost of an email, or simple IM? People paying hundreds of bucks to set themselves up for locked-in contracts?
I've been an Apple client since 1979. You want to know what pisses me off? Apple turning into a fucking toy company, and incrementally destroying NeXTSTEP. Apple spending time on bullshit iPhone screenshot shit, and hanging on to the HFS+ file system, which is actually incompatible with their lousy OS. Leopard is nothing but a resource-hungry POS.
I ride the bus and Light Rail, here in Minneapolis. I hear the ringtones and sometimes I glance around and every kid and person of color on the whole bus is playing Tetris, or fiddling with their fucking phones. When I see the voting returns, the top 10 TV shows by viewership and the voracious appetite in America for 'subjective' dispute of scientific facts, it's no wonder the country has reached a point where every successive 'decision' brings them closer to their own private armageddon. These people are wasting their fucking time on bullshit. Apple knows this, so yes, they pander to people with more money than brains.
And just so there's no mistake, my last four PowerBooks, and three Apple desktops, were gifts from my happy clients. Apple hasn't seen a nickel (outside of ONE recently-purchased keyboard), from me, since '94. And if Adobe ever ports to Linux, that's it for me, sayonara toy company, and back to work.
Trolling much?