Slashdot Mirror


FBI Director James Comey: Cover Up Your Webcam (thehill.com)

An anonymous reader quotes a report from The Hill: The head of the FBI on Wednesday defended putting a piece of tape over his personal laptop's webcam, claiming the security step was a common sense one that most should take. "There's some sensible things you should be doing, and that's one of them," Director James Comey said during a conference at the Center for Strategic and International Studies. "You go into any government office and we all have the little camera things that sit on top of the screen," he added. "They all have a little lid that closes down on them. "You do that so that people who don't have authority don't look at you. I think that's a good thing." Comey was pilloried online earlier this year, after he revealed that he puts a piece of tap over his laptop camera to keep away prying eyes. The precaution is a common one among security advocates, given the relative ease of hacking laptop cameras. But many found it ironic for Comey, who this year launched a high profile battle against Apple to gain access to data locked inside of the iPhone used by one of the San Bernardino, Calif., terrorists. Many viewed that fight as a referendum on digital privacy.

117 of 168 comments (clear)

  1. Some sensible things by Anonymous Coward · · Score: 5, Interesting

    "There's some sensible things you should be doing, and that's one of them,"

    Another sensible thing you should be doing is using encryption.

    And voting out anyone who thinks that the FBI's warrantless wiretapping is sensible.

    1. Re:Some sensible things by Z00L00K · · Score: 5, Insightful

      But you also need a switch on your microphone to turn it off. It's a bigger risk than the camera since eavesdropping on a conversation can reveal a lot more than the camera can when it comes to company secrets.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    2. Re:Some sensible things by guruevi · · Score: 3, Insightful

      Another thing would don't trust your corporate overlords with 'managing' your laptop and stop using Windows as an admin user or stop using Windows altogether.

      Hacking a laptop is fairly hard to do if it's properly secured without remote access. Things like SELinux or Mac's Gatekeeper or any Unix-type OS can be set so that only specific applications have access to certain hardware.

      If you want to use tape, you should also snip out your microphone and speakers, glue your USB ports shut and fully encrypt your system with a third party, open source encryption.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    3. Re:Some sensible things by poofmeisterp · · Score: 5, Funny

      But you also need a switch on your microphone to turn it off. It's a bigger risk than the camera since eavesdropping on a conversation can reveal a lot more than the camera can when it comes to company secrets.

      Ah, but not if you're Comey. He encourages people to listen to his microphone to ensure transparency and fairness. Of course that microphone is in an enclosed break room in the "building next door".

      Har.

    4. Re:Some sensible things by Anonymous Coward · · Score: 5, Informative

      No it doesn't. At a cursory glance yes it can because it'll probably switch the default input, but in software you can still access each input source independently. So a trojan could continue listening on the microphone array in your screen even when you have your headset plugged in.

    5. Re:Some sensible things by btroy · · Score: 4, Insightful

      I agree - the microphone has been ignored largely, both on phones, tablet and laptops. I do think companies should provide a MECHANICAL means for disabling microphones and cameras.

      Anyone wanting to develop a SECURE device should be seriously looking at that option.

    6. Re:Some sensible things by bigpat · · Score: 1

      "There's some sensible things you should be doing, and that's one of them,"

      Another sensible thing you should be doing is using encryption.

      And voting out anyone who thinks that the FBI's warrantless wiretapping is sensible.

      +1

    7. Re:Some sensible things by jellomizer · · Score: 4, Insightful

      Well if a good portion of the population votes for the actual person they feel will win, instead of wallowing in their own self delusion that the it is too corrupt for them to do anything.

      If you want to do something.
      1. Do your research on who is running and what they stand for.
      2. Pick the person who you like independant on if you think they will win or not, or if you think your vote will detract from your most likely candidate.
      3. Go to the polls and vote.

      Here is the cool thing about the power of voting third party. The two major parties are not stupid, they track trends and voter demographics like any big data company. While they may not necessary know who at every household has voted for they can get a feel of the political temperature within a few miles of the polling place.
      So while most polling places will most of the vote for the major party, your third party vote is useful unaveraged bit of information. There is this one guy who voted for third party out of a hundred who voted for the establishment. Now that data is useful. So if they voted Green Party, then that may tell the Democrats that your area may have some additional concern about environmentalism, if they voted libertarian then the person may be concerned about their personal liberty. Now if there are enough 3rd party votes say 1% overall trending in a direction, that will tell the parties that they will need to incorporate aspects of that third party into their base policy as to adapt to the electorates wants.

      While your vote may not win the election. It can change the direction of the next one.

      Take a look at the Tea Party. Like them or despise them, they were able to get national recognition and many of its aspects became core of the republican party. Because that group voted in local elections, than for their representatives and senators creating a large party growth. Sure they were backed by some big names that sneaked their agenda in it. However the people voted them in. While those liberals complaining on how bad those guys were stayed home during the off year election and allowed them to get in power.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    8. Re:Some sensible things by AmiMoJo · · Score: 4, Interesting

      I wish manufacturers would include a physical switch that simply disconnects the webcam (most use an internal USB connection for both video and audio) by physically breaking the link. No possible software bypass.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    9. Re:Some sensible things by gfxguy · · Score: 3, Insightful

      Except the parties don't "incorporate aspects of that third party into their base policy," they only say they will and then don't, with some lame explanation why... but they are still the major party that claims it supports that third party policy, so people vote for them anyway. I'm libertarian - people think republican party must be the party to vote for if you're libertarian (they falsely only look at certain economic issues), or you are effectively voting for democrats - but neither republicans nor democrats are libertarian in any way. The only difference is which of your liberties and freedoms they don't care about.

      --
      Stupid sexy Flanders.
    10. Re:Some sensible things by Z00L00K · · Score: 3, Funny

      Switch the web cam to serve a random video stream of cats copulating maybe?

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    11. Re:Some sensible things by StormReaver · · Score: 1

      Things like SELinux or Mac's Gatekeeper or any Unix-type OS can be set so that only specific applications have access to certain hardware.

      I wouldn't trust Mac, as it's closed source. But I don't blindly trust my Linux-based systems, either, as they run on closed hardware. Comey and the Three Letter Agencies have made open hardware all the more necessary.

    12. Re:Some sensible things by Bob+the+Super+Hamste · · Score: 1

      That and just pipe the audio portion of the video to the mic and it would all be good. The last time heard that awful noise it was shortly followed by the discharge of a high power rifle.

      --
      Time to offend someone
    13. Re:Some sensible things by Humbubba · · Score: 1

      While I agree with Comey about taping over the camera lens, it's not enough bandage. Neither is encryption, nor the game of changing seats over the FBI's tactics. And breaking into an iPhone is such a small example of the real problem. The Internet, which to my mind includes all the things feeding from it, is Orwellian by design. To steal a phrase, it is âoethe most massive, sophisticated and skillfully executed bugging operation in history.â The only solution is to figure out what's wrong, then tear it down and rebuild it from the ground up.

    14. Re:Some sensible things by poofmeisterp · · Score: 1

      I agree - the microphone has been ignored largely, both on phones, tablet and laptops. I do think companies should provide a MECHANICAL means for disabling microphones and cameras.
        Anyone wanting to develop a SECURE device should be seriously looking at that option.

      I hereby state that this is an official design idea that I will claim prior art on if someone uses it...

      A box or enclosure style of a handgun lock box or a special laptop bag design, not limited to these), where one can place their devices into, that acts as a Faraday Cage and is also near 100% soundproof. The enclosure can also have an antenna port built in that allows delivery of only RF; this type must have a built-in electronic sensor for audio internally so that an external speaker can notify the user that the device is receiving RF and emitting audio noise (example: notification, ring). Alternatively, enclosures without Faraday Cage can be designed but block all other sensor / receive methods.

      ==
      That will let people that need true privacy while they're breaking a law or cheating in a relationship have a place to get their True Security Assurance(c)(tm).

      Humorously, is law enforcement or other government agencies have a problem with hiding and securing/blocking device reception and emission can require that the case/bag have a large orange area with an exclamation point with the words "Not a Weapon".

    15. Re:Some sensible things by clodney · · Score: 3, Interesting

      Things like SELinux or Mac's Gatekeeper or any Unix-type OS can be set so that only specific applications have access to certain hardware.

      I wouldn't trust Mac, as it's closed source. But I don't blindly trust my Linux-based systems, either, as they run on closed hardware. Comey and the Three Letter Agencies have made open hardware all the more necessary.

      Open Source is perhaps modestly more trustworthy, but things like the obfuscated C contest and the fact of very long lived bugs in core elements like SSH prove that open source is no panacea. Whether done by the US or somebody else, I wouldn't be at all surprised to find out that there are intentional backdoors injected into lots of open source projects, and that it is done skillfully enough that they haven't been noticed.

    16. Re:Some sensible things by rahvin112 · · Score: 1

      Your suggestion only works if the candidates are truthful. No politician is truthful and the two running for president are damn near compulsive liars.

    17. Re:Some sensible things by fahrbot-bot · · Score: 3, Funny

      I agree - the microphone has been ignored largely, both on phones, tablet and laptops.

      Not to worry. Apple will be removing the mic too on all these too -- not for security but to free up space and improve water resistance. Surveys show that doing it on the iPhone will be a hard sell though.

      --
      It must have been something you assimilated. . . .
    18. Re:Some sensible things by chihowa · · Score: 1

      If you want to use tape, you should also snip out your microphone and speakers, glue your USB ports shut and fully encrypt your system with a third party, open source encryption.

      That's ridiculous hyperbole. Besides the sticky glue residue left behind, putting tape over the webcam is a cheap, easy, and reversible process and offers the very real potential of slightly increased privacy for most users.

      If you're arguing that tape alone doesn't provide perfect security so it's not worth doing, then that's a bullshit argument. Any of the actions you suggested individually increase your privacy and may be worth doing on their own (depending on your threat scenario). They each have incremental value, even if you don't do all of them together. Real security is a continuum: full of compromises and risk assessments.

      --
      If you want a vision of the future, imagine a youtube comments section scrolling - forever.
    19. Re:Some sensible things by poofmeisterp · · Score: 1

      Well if a good portion of the population votes for the actual person they feel will win, instead of wallowing in their own self delusion that the it is too corrupt for them to do anything.

      If you want to do something.

      So the first thing I should do is cut off from the media, correct? Check. :) No TV, no radio, LALALA when people at work talk about what's going on... Check.

      Ah, if only everyone could do that.

      I'm not being a smartass. I really do ignore the media BS and avoid conversations about the BS at work. All candidates have done something bad. All lie. All cheat. All think they're better than everyone else... Have to focus on only the base line of their beliefs and "plans". Eh, that last part is even tricky.

      Here's an idea - remove the titles and colors for Republican and Democrat. Present the people as they are. If they give hints to people about which party they're in, immediate disqualification. The answer to every public opinion of "so [candidate] is democrat, right? I've heard what they've said and that must be what they are," the answer is UNCONDITIONALLY "No." Remove the party lines and maybe, just maybe your great idea would work. Again, not being a smartass. I'm serious. Also, it will never happen, so borderline delirious or some such razz material. :)

    20. Re:Some sensible things by guruevi · · Score: 2

      I'm saying that taping over your webcam is useless if you leave your microphone and your speakers (which can also act as microphones) untouched.

      It's far more damaging and perhaps even easier (no indicator lights) for someone to be able to listen in surreptitiously than watch. A Flash vulnerability could easily turn on your camera and microphone but your indicator would still work. Your camera still has physical limitations (it can't watch around the room) while microphones will pick up anything from conversations to passwords being typed in.

      If all you care is nobody catching you masturbating, then yes, the camera trick will do, for all other things, your other sensors are far more valuable.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    21. Re:Some sensible things by SuricouRaven · · Score: 1

      It's ok, you can still buy the bluetooth iMic for $89.

    22. Re:Some sensible things by Comen · · Score: 2

      Not if the switch was inline with the microphone circuit, not everything can be bypassed in software. If you put a switch in line with the connection directly coming from the microphone(s) then they are disabled.
      I mentioned this years ago and still think there should be security standards for microphones and cameras that basically say if yo meet certain specs you are a secure deice, that would include hard cut off switches and lights that are always on when the switch is closed to show you can be seen or heard.

    23. Re:Some sensible things by pD-brane · · Score: 1

      Open Source is perhaps modestly more trustworthy, but things like the obfuscated C contest and the fact of very long lived bugs in core elements like SSH prove that open source is no panacea. Whether done by the US or somebody else, I wouldn't be at all surprised to find out that there are intentional backdoors injected into lots of open source projects, and that it is done skillfully enough that they haven't been noticed.

      There may be backdoors in some free software, but this is quite unlikely for such security-focussed projects like OpenSSH (assuming you refer to this implementation).
      Calling free software only "modestly more thrustworthy" is close to spreading FUD.

    24. Re:Some sensible things by chihowa · · Score: 1

      I'm saying that taping over your webcam is useless if you leave your microphone and your speakers (which can also act as microphones) untouched.

      And I'm saying that it's not useless, but that its usefulness depends on your own specific threat scenario. If you can't think of a scenario, besides being seen masturbating (which is a valid enough scenario to completely negate your point), where one would be more worried about pictures being taken than microphones recording sound, then your imagination is seriously limited.

      In many cases, laptops with cameras are present and networked in environments that are not often populated but still have sensitive activity occurring in them (not "let's build an expensive SCIF" sensitive, but "this piece of tape completely mitigates the risk" sensitive). There's your industrial espionage scenario.

      A bit more mundane: your child has a laptop. Listening in on their inane chatter is going to be less attractive to the hypothetical weirdo than snapping pictures of them naked. Is that likely? Of course not, but a piece of tape completely mitigates that risk and they can still use the computer because it still plays sounds and has usable ports.

      Your one-size-fits-all, over-the-top or nothing-at-all security doesn't actually apply to the real world. Everybody is much better off assessing their own risks and acting accordingly. Is this really that hard to understand??

      --
      If you want a vision of the future, imagine a youtube comments section scrolling - forever.
    25. Re:Some sensible things by Hotawa+Hawk-eye · · Score: 1

      If you live in a state where the outcome of the presidential election is not in doubt, then voting for a third-party candidate is a sensible idea.

      And when enough people in that "safe" state vote for a third-party candidate, suddenly the state isn't quite so "safe" any longer. Remember Brexit?

      In an interview on BBC’s Victoria Live, one man who voted "Leave" said, "I didn’t think my vote was going to matter too much because I thought we were just going to remain."

      The man, who was introduced as Adam, said he is now "worried" because he assumed "Remain" would win. He added, "I think the period of uncertainty that we’re going to have for the next couple of months — that’s just been magnified now. So yeah, quite worried."

    26. Re:Some sensible things by antdude · · Score: 1

      But how do we know they are really off? ;P

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    27. Re:Some sensible things by jellomizer · · Score: 1

      Normally I see the politicians trying to accomplish what they say they want. However they are strong forces trying to do the opposite as well. So they will need to figure out what can they let slide so they can get what they feel strongly about to work.

      The biggest lie is that they say "I Will" vs the truth is "I'll Try"

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    28. Re:Some sensible things by jellomizer · · Score: 1

      I wouldn't ignore the media, but people need to get Media Smart.

      For example the media love to hit on Hillary's email and her lack of personal openness. And they also want to hit Trump when ever he says something or do something remotely racist, or says something the republican party doesn't like.

      These distract us from the issues that the media covers as well. However these issues are covered in a 5 minute segment with 25 minutes of repeating the old stuff.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    29. Re:Some sensible things by jellomizer · · Score: 1

      If you are in a swing state, You can still vote third party, if you feel that you could live with the guy you didn't want to be in charge for that term, while that demographics data means a stronger run the next election cycle. As in a swing state each of the two parties, really doesn't want people causing them to lose votes. So they will pay attention to the change more carefully.

      However if you feel that a particular candidate really shouldn't win then vote for the other major contender.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    30. Re: Some sensible things by poofmeisterp · · Score: 1

      You're right. Catch 22. Can't control whether media presents truth or spoon, or "what they heard from so and so" to shrug blame. I'm back to Catch 22 without making media government-controlled, which is more like a Catch-22^10. Ideas? Aside from people getting smarter, cuz that ain't gon' happen.

    31. Re: Some sensible things by poofmeisterp · · Score: 1

      Spoon=spin. Damn swype. :)

    32. Re:Some sensible things by Coren22 · · Score: 1

      http://www.realclearpolitics.c...

      Libertarians are currently polling around 10%, are you expecting them to fracture any day now?

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
  2. Paranoid much by Revek · · Score: 1, Flamebait

    Ive seen this before from some of my customers and yes I've thought of it. Since its possible I guess its a step you need to take but why stop there. His phone has two cameras and they need some tape also. That pinhole in the wall may be sporting a camera also. How do you know the air conditioner vents doesn't have camera. Oh MY GoD they are watching ME!

    1. Re:Paranoid much by Anonymous Coward · · Score: 2, Informative

      Ive seen this before from some of my customers and yes I've thought of it. Since its possible I guess its a step you need to take but why stop there. His phone has two cameras and they need some tape also. That pinhole in the wall may be sporting a camera also. How do you know the air conditioner vents doesn't have camera. Oh MY GoD they are watching ME!

      I trust desktop software to behave as far as I can throw it. Sure it's possible to bug anything, but after the horror of video conferencing software lighting the camera up unexpectedly while I was in "work from home" attire, never again.

    2. Re:Paranoid much by Anonymous Coward · · Score: 2

      Are you being obtuse for a reason? Seeing as you're on /. you know perfectly well most CCDs in webcams can be activated without the "on" LED being powered. In fact a good number of webcams are always on - just measure the current draw if you have any elementary skills.

      There's a world of difference between a hidden camera placed for espionage, and one built into a consumer device that's permanently connected to the Internet and happens to be remotely accessible by various govt agencies as well as the OS supplier, and no doubt the company that has a badge on the front.

      No go and fix your teeth and shitty language skills you limey turd.

    3. Re:Paranoid much by bickerdyke · · Score: 2

      You can't get a camera in the air vent from a drive-by download from an otherwise reputable website that had the bad luck of its ad content network being hacked.

      And the workaround with the tape wouldn't even be necessary if the camera LED would be hardwired to the camera reliably across laptop manufacturers and not switched on and of by the driver on a goodwill base.

      --
      bickerdyke
    4. Re:Paranoid much by poofmeisterp · · Score: 1

      Ive seen this before from some of my customers and yes I've thought of it. Since its possible I guess its a step you need to take but why stop there. His phone has two cameras and they need some tape also. That pinhole in the wall may be sporting a camera also. How do you know the air conditioner vents doesn't have camera. Oh MY GoD they are watching ME!

      I don't care if people watch me all day and all night... As long as I'm not picking my nose. That's the only thing I don't do.. ever.. that people shouldn't see.

      </humor>

    5. Re:Paranoid much by fustakrakich · · Score: 1

      Oh MY GoD they are watching ME!

      Jaaaa

      --
      “He’s not deformed, he’s just drunk!”
    6. Re: Paranoid much by nasch · · Score: 1

      My camera has a physical shade that I can slide down to cover the camera. Seems like this should be a common feature.

    7. Re:Paranoid much by wonkey_monkey · · Score: 1

      Hah. Boogers.

      --
      systemd is Roko's Basilisk.
    8. Re:Paranoid much by AHuxley · · Score: 2

      Re How do you know the air conditioner vents doesn't have camera.
      Most cults and inward looking communities with global ambitions have some very easy and old methods to try and counter that digital sneak and peak hardware placement.
      The extended community stays around any sensitive locations and have eyes on 24/7. Or can even fake a sensitive community project for decades and understand who comes looking and how they try to gain entry, build trust :)
      All strangers entering the area are noted, photographed and talked to.
      If the neatness, sloppiness, jargon, slang, accent, hair cut, life story, education level, local issues, local sports, stories told, trade tools don't fit and access is requested, its usually ex mil, federal or state efforts to seek access with limited time or funding for a full back story.
      Its getting harder to place undercover officers as many groups of interest are not just allowing people to join. Informants will often admit they got turned and pass on lots of low level gossip to keep their freedom i.e. the faith, other nation or cult has more of a hold than any gov offer.
      All most federal and state task forces can then do is track all movements from public land, try and bluff their way in just once, get any informant with a real life story in or push malware down any network.
      COINTELPRO https://en.wikipedia.org/wiki/... worked too well and most groups by faith or method understand the easy past entry methods.
      State or federal courts paperwork on any case can even be leaked back by deep cover cult or faith members. Secure telco requests to collect or log phone numbers will often be tracked long term and database changes noticed. Very interesting people can then escape thanks to telco and court database issues.

      --
      Domestic spying is now "Benign Information Gathering"
    9. Re:Paranoid much by DirkDaring · · Score: 1

      How far can you throw a hard drive? Or a DVD? I bet I can hit 30 yards on those suckers!

    10. Re: Paranoid much by bickerdyke · · Score: 1

      Yes. As long as you can't be sure that the cam can't be activated without lighting the LED. But then, you would not be able to tell if the cover would not be transparent to IR....

      --
      bickerdyke
    11. Re: Paranoid much by nasch · · Score: 1

      Wondering if your webcam is secretly an IR camera and the privacy shade is secretly transparent to IR... now THAT'S paranoid. :-)

    12. Re: Paranoid much by gfxguy · · Score: 1

      No, it's really not - because it's not someone spying on you to get secret information; 99% of the time it's some pervert trying to sneak a peak at your privates, and they will scan around looking for any computer they can connect to.

      --
      Stupid sexy Flanders.
    13. Re: Paranoid much by bickerdyke · · Score: 2

      Well, yes.

      But is it more ore less paranoid than wondering if that webcam activity LED can actually be switched on and off independently from the camera by the device driver software? (which it usually is. Not due to malice, but to bad or "unsafe" design)

      And most camera sensors today ARE already IR cams due to sensor characteristics. Most have an IR filter to improve image quality in sunlight, but again, it wouldn't even take malice to cut that filter for cost saving reasons.

      --
      bickerdyke
    14. Re:Paranoid much by Anonymous Coward · · Score: 1

      Pull!

      *blam!*

    15. Re:Paranoid much by Revek · · Score: 2

      I was going for funny. However I've never had a plus +2 flame bait before. Thats almost as good as a +1 Troll.;)

  3. Really? by Anonymous Coward · · Score: 1

    If someone has installed in your computer a piece of software that enables him to activate your webcan disabling the led your webcam should be the least of your worries.

    1. Re:Really? by Anonymous Coward · · Score: 1

      If what you do with the laptop is more important than what the webcam sees, then sure. But if the laptop is used to play solitaire in a room where illegal things are happening, then it's the opposite and the webcam is your main worry.

    2. Re:Really? by geekmux · · Score: 1

      If someone has installed in your computer a piece of software that enables him to activate your webcan disabling the led your webcam should be the least of your worries.

      That certainly means it shouldn't be a worry at all, and if that's the only vulnerability "someone" has exploited, you're still compromised.

      Humans seem to either embrace security or ignore it altogether. But if you're going to find yourself somewhere in between, you should probably start somewhere. Being unwittingly recorded (in HD) is hardly something to dismiss.

    3. Re:Really? by 110010001000 · · Score: 1

      Considering what I do in front of my computer that WOULD be my biggest worry...

    4. Re:Really? by Anonymous Coward · · Score: 1

      Let's say you've got a guest-access laptop or all-in-one computer in your lobby, training area or some such. Everyone knows it's a risk as a dirty machine, so they don't do anything on it that they don't need to, and they avoid giving it passwords, passing sensitive data through it, etc. Every hotel with a "business center" has these today.

      So, great, people practice good computing hygiene around them, because they're assumed to be dangerous. And yet, who would think of them as an eavesdropper on local verbal conversations? If you're going to talk about sensitive things, you're going to glance around and be sure nobody who shouldn't hear can hear, but do you think about that bank of idle computers on the wall?

      This is not a new problem, either; Sun Microsystems brought it up in 1993 .

    5. Re:Really? by geekmux · · Score: 1

      Let me ask you a question. If someone told you "there is a rootkit in your computer" your first reaction would be "oh, no! my webcam! what if someone has a picture of my face in HD?"?

      I'd probably be more concerned about a microphone tap or keylogger, but a tap into my HD camera would not exactly be at the bottom of the list of major concerns, as many are trying to imply it should for some reason.

      Let me ask you a question. Have people lost their jobs or eve been sued over a private conversation or photos being inadvertently leaked online, regardless of consent?

      I rest my case. A picture is sometimes worth even more than the proverbial 1,000 words. Just ask Google Images.

    6. Re:Really? by Cederic · · Score: 1

      Well, my work laptop belongs to the company. They install whatever the fuck they want on it.

      I install the strip of tape over the camera lens.

  4. Got it already. by jddj · · Score: 1

    C'moon, really? If your high school can cut it on, who can't?

  5. If you have reasons to believe that your computer by Anonymous Coward · · Score: 1

    is compromised, then you have bigger things to worry about than the webcam. This isn't "sensible", we shouldn't have to live our lives in terror, expecting invisible, omnipotent foes to be watching us at all times.

    If it's not compromised, you don't cover it. And yes, if you run Windows 10 or Windows 7/8/8.1 with spyware updates, it IS compromised.

  6. Already did that by TheCarp · · Score: 1

    And by did that....I mean my PHONE camera, because I would never leave a camera connected all the time to my desktop PC anyway.

    BOTH cameras on my phone are covered by pieces of plastic that need to be moved aside physically in order to take pictures. Did that the very day I bought the phone.

    However, I looked for actual products to do this....couldn't find a one. Not a single case with camera covers built in, not a single accessory available.....sad....very sad.

    --
    "I opened my eyes, and everything went dark again"
    1. Re: Already did that by joerdie · · Score: 1

      So go make one. That's the American way isn't it? See something missing from the market that you believe would be profitable? Go make a prototype.

    2. Re: Already did that by Anonymous Coward · · Score: 1

      YES! That's the solution! How stupid of me not to realise! hate all the computers out there, so I'll go out and start my own computer company just so I can build one I like.

      Let's see, I have $13.50 in my bank account. I can probably find another $2.75 inside my sofa. I'm all set to open my own factory, hire employees and start assembling!

      Hmmm. This Libertarian Fantasy seems to work a lot better when you have rich friends or relatives so you can actually raise a useful amount of capital.

    3. Re: Already did that by goarilla · · Score: 1

      He can just create a dwg or whatever and have a fablab manufacture it. It will not be as cheap as a 5$ case
      but it won't break the bank either.

    4. Re:Already did that by CCarrot · · Score: 1

      And by did that....I mean my PHONE camera, because I would never leave a camera connected all the time to my desktop PC anyway.

      BOTH cameras on my phone are covered by pieces of plastic that need to be moved aside physically in order to take pictures. Did that the very day I bought the phone.

      However, I looked for actual products to do this....couldn't find a one. Not a single case with camera covers built in, not a single accessory available.....sad....very sad.

      Hmm...apparently you fail at searching teh interwebs.

      Mind you, these only seem to be available for iPhones, which sucks, although I did come across these which intrigue me. Maybe my days of electrical tape are over!

      --
      "I love animals! Some are cute, others are tasty, what's not to like?" - Betsy Schroeder, Jeopardy contestant
    5. Re:Already did that by TheCarp · · Score: 1

      Well, that would be why I didn't find it, pretty sure the last apple product I bought was for hooking up to my ][GS. Still salty about their broken promise of ][ Forever.

      --
      "I opened my eyes, and everything went dark again"
  7. "people who don't have authority don't look at you by LichtSpektren · · Score: 4, Insightful

    Like the NSA, doing illegal mass surveillance on their own citizens?

  8. Doesn't It Also Have a Microphone? by Greyfox · · Score: 1

    Most of those seem to also have on-board microphones. Given what they can determine with microphones these days, that seems like the greater risk.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  9. Comment from Comey: by poofmeisterp · · Score: 1

    "Well, in the case of things like encryption, the situation is completely different. When it comes to prying eyes, what I do is considered fine in the category of double standards, while people encrypting data is not; especially when there is something I want to see in an encrypted set. I have the authority, because I gave it to myself, so I can look. I mean, um, all of my staff and the agency can look."

    Not a real quote, of course.

    This sounds like another psychological cover-my-ass gig where someone who lost a battle tries to encourage something to ensure they internally still feel in control. Sort of like the "Well, it didn't work after your suggestions, but I planned for that to happen" crap.

    1. Re:Comment from Comey: by poofmeisterp · · Score: 2

      Do you actually oppose the FBI decrypting the iPhone of a guy who declared loyalty to ISIS and killed a bunch of people? Many people thought that trying to force Apple to do it was a bit much, but what is so sacred about encryption itself?

      This was intended to be a semi-humorous comment, but I'll answer your question (though you probably won't see it because you're Anonymous and have forgotten about it already) - NO. Game on. If the FBI can decrypt the data, rock on. If they require that companies make all data decryptable, YES. I have a problem with that. It's not about having things to hide, it's about the constriction of American rights. Do I want them to be able to find a guy who shot 1000 people in Times Square, uh YEAH. Do I want them to have access to everyone's data in order for that shooter to be part of the "everyone" whose data is accessible, NO.

      Simple freaking logic: There's a line. Don't cross. One side of the line has people using paper to communicate and burning it / destroying the ashes / burying it. The other side has an encrypted electronic device. The rights of the government to TRY and reconstruct the paper and get details off of it OR decrypt a device using brute force or other methods they designed to uniquely, on their own, get access are fair game. Making a rule that paper is to be designed to electronically log everything written on it, or all devices have a quick access method is NOT. If the method exists, it will be exploited, so it shouldn't exist.

  10. Alternately by Anonymous Coward · · Score: 2, Funny

    stare directly into the camera and slowly stroke off. establish dominance.

  11. Re:If you have reasons to believe that your comput by geekmux · · Score: 1

    is compromised, then you have bigger things to worry about than the webcam. This isn't "sensible", we shouldn't have to live our lives in terror, expecting invisible, omnipotent foes to be watching us at all times.

    If it's not compromised, you don't cover it. And yes, if you run Windows 10 or Windows 7/8/8.1 with spyware updates, it IS compromised.

    So, you recommend to not be paranoid while labeling the masses who run any version of Windows released in the last fucking decade as "compromised".

    Feel free to put down your Catch-22 paint brush anytime. Needless to say, people can't quite make out your "art", and this is hardly a convincing argument for Apple or Linux.

  12. Morons.... the lot of them.... by Lumpy · · Score: 3, Informative

    "You go into any government office and we all have the little camera things that sit on top of the screen"

    Why the hell are they not ordering real pro laptops without the camera? my Dell Precision 7510 does not have a camera and company wide we all understand that a camera on the laptop is 100% useless in business. if you need to do a video call you use one of the conference rooms.

    we are not even high security and we dont have cameras. what the hell are they doing ordering laptops with cameras at their level?

    So the director of the FBI has a insecure laptop...... This is why we cant do shit in this country in law enforcement.

    --
    Do not look at laser with remaining good eye.
    1. Re:Morons.... the lot of them.... by HBI · · Score: 1

      They do, at least the Army does. They thought of this already.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    2. Re:Morons.... the lot of them.... by Lumpy · · Score: 1

      If the army understands this then the FBI has no excuse.

      --
      Do not look at laser with remaining good eye.
    3. Re:Morons.... the lot of them.... by HBI · · Score: 2

      The FBI is notable for poor handling of classified information. It's a civilian organization with all the slipshod nature of an organization that doesn't understand "mission" in the military sense. The Army has many faults, but this is one thing it does reasonably well.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  13. Something to hide? by nick.degraeve · · Score: 5, Funny

    It must mean he has something to hide, right? Because privacy is only needed for people who have something to hide.

  14. Re:If you have reasons to believe that your comput by 110010001000 · · Score: 1

    Invisible omnipotent foes ARE watching you at all times. What do you think Apple, Google and Microsoft are? Your buddies?

  15. Lost their way by doug141 · · Score: 2

    The different parts of executive branch can't even count on being safe from each other, when their culture is to disregard the constitution for some perceived higher purpose.

  16. Cover up your webcam... by Anonymous Coward · · Score: 1

    ...but please, don't encrypt your mails and your harddisk BECAUSE I'M TOO FUCKING STUPID TO DO IT MYSELF!

    Gah. Had to get that out.
    -- James Comey

  17. But today's Thursday by wonkey_monkey · · Score: 2

    The head of the FBI on Wednesday

    That guy's old news. What does Thursday's head of the FBI say?

    FBI Director James Comey: Cover Up Your Webcam

    Don't tell me what to do, chief. Maybe being perved on by hackers is my thing! You can't judge me!

    --
    systemd is Roko's Basilisk.
  18. Or you could use a more secure OS by damn_registrars · · Score: 2

    If he's worried about someone hacking his laptop and turning on his webcam without him realizing it, then he isn't using his laptop in a secure and reasonable way.

    He is also overlooking the fact that voice recordings are generally at least as valuable as video (unless he is worried they are going to record his silent meetings with prostitutes or something), and covering up the webcam doesn't generally do anything to prevent sound from being recorded. If someone else has control of your webcam, they almost certainly have the ability to record sound using your system when the webcam is blocked by tape. Equally important, if they are recording sound with no video, they can record much longer time-wise than if they are recording sounds with video.

    But ultimately if he was using a secure OS, or at least using his OS of choice in a moderately secure way - he shouldn't have to worry about this. If he's spending most of his day falling into clickbait and loading malware, he's going to get what he has coming.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:Or you could use a more secure OS by btroy · · Score: 1

      you vastly underestimate the ability to hack systems. Even embedding trojans into OS's and software.

      btw - please put on a shirt. ;-)

    2. Re:Or you could use a more secure OS by drinkypoo · · Score: 1

      But ultimately if he was using a secure OS,

      Name a secure OS.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:Or you could use a more secure OS by damn_registrars · · Score: 1

      But ultimately if he was using a secure OS,

      Name a secure OS.

      While nothing is 100% secure from all attempts, some systems are vastly more secure than others. If he's worried that hackers have taken control of his webcam, he probably isn't running one of the latter. Hell it is trivial to just not load the webcam driver in most systems, and then the problem becomes moot. Or he could do as I did with one of my thinkpads from a few years back and just order it without a webcam (or physically remove said webcam).

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    4. Re:Or you could use a more secure OS by damn_registrars · · Score: 1

      That's what alaway gets me about these "tape over the webcam" types. Why do you even have a webcam? (it's like having a laver that drops you into the alligator pit)

      To be fair, a lot of typical consumers don't even realize you can buy a laptop that doesn't have a webcam in it. A lot of typical consumers don't realize that there are a lot of laptops available beyond what is at Best Buy and the Apple Store; I would bet that the idea of ordering one without a webcam has simply never crossed their mind because they didn't know it could be done.

      That said, the director of the FBI should be smart enough to know it. Or, at least, the IT procurement guy who ordered his laptop for him should have been.

      --
      Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  19. Re:If you have reasons to believe that your comput by K.+S.+Kyosuke · · Score: 1

    He's a spy nutter.

    --
    Ezekiel 23:20
  20. Cover microphones doesn't work by Anonymous Coward · · Score: 5, Interesting

    As a side note, sticking tape over the microphone holes does not work, no matter how thick the layers of tape. You can confirm this yourself by sticking tape over mics on your phone and then using a recording app. It will still record audio that is clear enough to understand.

    A modern tablet or phone has enough microphones in a mic arrange, and enough sensitivity that sound coming through the case can be recorded easily. The best you can achieve is to make it muffled.

    Snowden used a fridge to stop stuff recording (it is airtight and bulky enough to stop sound so phones inside cannot record). It's not useful as a faraday cage, because a lot of the spyware records stuff and sends it only when opportune (e.g. on Wifi, or when you're sending lots of other data to conceal the transmission). So a faraday cage would not help, it could still record audio and video and send it later.

    FBI head tapes over his cameras, Mark Zuckerberg does, Anonymous Cowards does, so *you* definitely should.

    Perhaps you recall the case of the Pennsylvania schools that installed spyware on their laptops and recorded kids at home using the computer? Well if you take a typical Android phone, it has lots of apps pre-installed that have camera access. So I noticed that Microsoft Word came pre-installed, and when I hooked the camera API, Word was being started periodically by Microsoft Skydrive, and accessing the camera api.

    http://www.computerworld.com/article/2521075/windows-pcs/pennsylvania-schools-spying-on-students-using-laptop-webcams--claims-lawsuit.html

    1. Re:Cover microphones doesn't work by Toshito · · Score: 1

      Well if you take a typical Android phone, it has lots of apps pre-installed that have camera access.

      The difference between my laptop and my android phone is that if someone hacks my phone's camera he will have the most comprensive collection of photos of the inside of my pockets, and of the ceiling of my bedroom... and some of my ear...

      --
      Try it! Library of Babel
  21. Re:If you have reasons to believe that your comput by KingBozo · · Score: 1

    You naive little fool.

  22. The only time this is reasonable by iCEBaLM · · Score: 2

    is when you do not have a record light on your webcam, otherwise when the webcam is on, the record light is on, and it's a hardware mechanism and it is impossible to get video without the record light coming on.

    1. Re:The only time this is reasonable by kbonin · · Score: 2

      You probably believe it takes 30 seconds of connection before a phone call is traceable, too...

    2. Re:The only time this is reasonable by drinkypoo · · Score: 1

      is when you do not have a record light on your webcam, otherwise when the webcam is on, the record light is on, and it's a hardware mechanism and it is impossible to get video without the record light coming on.

      How do you know the record light isn't just connected to a GPIO that can be controlled by the driver, and either illuminated or not? Have you analyzed the circuit? Did the vendor publish a schematic which you then verified?

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:The only time this is reasonable by Anonymous Coward · · Score: 1
  23. Some things shouldn't be software controlled. by jellomizer · · Score: 3, Insightful

    That switch to turn off your microphone and video camera. Should not just send a digital bit to the OS to decide what to do with it. It should physically cut circuit that provides the device power. Also the same with the LED on camera to show that it is recording this shouldn't be a feature that is programmed in the software it should be hard in the device.

    The only real trade off with a mechanical switch is that it will take up more space. So your device will be a bit bulkier and heavier... However my point of view is how much security do you want to compromise for form factor.

     

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    1. Re:Some things shouldn't be software controlled. by Angeret · · Score: 4, Interesting

      A simple solution for this on laptops - a pair of small sliders, one a physical switch which cuts the mic line, the other a flag covering the camera lens (rear cameras on handheld devices are for someone else to figure out). Both would be near to the front bezel of the device so a small window could show a red mic symbol when the mic switch is moved to on, a green mic with a line shows when switched to off. For the camera, the green panel - off - would be solid and the red - on - would have a hole in it for the lens. You could still make the camera switch a camera power killer if so desired (might also be that rear camera solution for other devices?).

      The only problems I see are companies wanting to incorporate this and how small and idiot proof you could make the additions. This is simply an engineering solution with easy user access - no software required, no menu hunting, so no issues with "does it really cut out?"

    2. Re:Some things shouldn't be software controlled. by Rexdude · · Score: 1

      Years ago, Nokia N-series phones had physical sliders, seen here on the N82 & N95 to cover the camera, and worked as a switch to start the camera when slid open. Nokia's destruction set the mobile industry back by years given how many things we've given up since then in favor of two choices - an overpriced walled garden versus an advertising and tracking happy platform. Yes, I root my Android and install Cyanogen and use adblock, but why do I have to replace the OS at all to get a modicum of privacy?

      --
      "..One hosts to look them up, one DNS to find them, and in the darkness BIND them."
  24. Sigh. by ledow · · Score: 1

    And what about the microphone in it?

    I'd get ten times the amount of critical information from a compromise from a microphone than I would a webcam.

    And almost all webcams are microphones too and/or require no more effort to compromise. If you can see down the webcam without the user noticing, you can silently record the microphone too.

    Dumb security advice from a guy who doesn't understand IT.

  25. Just In Case by twmcneil · · Score: 2

    Just in case you missed it, James Comey has lied Congress, has lied to the American public and is not to be believed, listened to or repeated.

    Just sayin'.

    --
    "The ferrets, they're every where I tell you!"
    1. Re:Just In Case by Dunbal · · Score: 1

      Be that as it may, even a broken clock tells the time correctly twice a day. Automatically discarding something that makes sense just because you don't like the source is foolishness.

      --
      Seven puppies were harmed during the making of this post.
    2. Re:Just In Case by Dunbal · · Score: 1

      No, generalizations and maxims like "Always discard something..." lead to sheeple. Brain. Use.

      --
      Seven puppies were harmed during the making of this post.
  26. Incoming legislation by Anonymous Coward · · Score: 1

    I humbly await the legislation that requires all tape to be manufactured with back doors

  27. Better idea by JoeyRox · · Score: 2

    Replace the A/V driver that handles the webcam with module that mimics the webcam driver interface but streams a video file of the user's selection. My choice would be a video of a donkey show.

  28. Clinton tool by SadButResolved · · Score: 1

    He has been doing devious shit for years for the clintons, hsbc, NWO, obama, etc... Security only matters when he has to hide something, otherwise how will he get the dirt he needs to control washington. All in the name of protecting the country you know.... snicker, yar, snicker, these agents are so gullible.

  29. We're going to have to have an adult conversation by Cajun+Hell · · Score: 1

    Maybe depriving adversaries of the ability to watch you makes good sense, but what if your adversary is law enforcement? You mighty have a reasonable expectation of privacy but that right is not absolute when law enforcement has probable cause to believe that your camera might provide evidence of a crime.

    I think the American people need to have an adult conversation with Comey, about his criminal-aiding advice and whether or not cameras (including Comey's own camera) should be allowed to "go dark."

    --
    "Believe me!" -- Donald Trump
  30. Hack my laptop but don't look at my face by naughtynaughty · · Score: 2

    Good thing the FBI director made sure nobody can see what he looks like when someone hacks his laptop and steals sensitive information.

  31. What about computer microphones by bigal123 · · Score: 1

    You can put something over a camera, these days an external web cam may have a microphone, the laptop itself may have a mic, if you have a headset plugged in it may have a mic. If a webcam can be turned on to see you then a mic can and it can get much more information and it is harder to block (can't just put some paper over it).

    How does one secure all the mics via hardware or (software that can' be overridden).

  32. Don't. Make them watch! by aralin · · Score: 2

    FBI and NSA Clearly wants to stop looking at pictures of naked fat guys and I say: "No way!" Make them watch! That is the least we can do. It is the only revenge we can exact on them. Wave that dong, juggle those layers of fat right at the camera. Make them see what their eyes cannot un-see. FFS. What are they going to do with it? Show your naked pictures to your girlfriend? Come on, you don't have any anyway. So pull that tape and make them suffer!

    --
    If programs would be read like poetry, most programmers would be Vogons.
  33. Or ... by BaronAaron · · Score: 1

    ... use an OS and as many apps that you can fundamentally trust (open source) to not allow unauthorized access to your webcam. Next make sure you buy hardware from a vendor you can trust. Finally practice some good computer use habits like not clicking on every attachment.

    Covering your webcam is like closing the barn door after the horses escaped. If someone can monitor your webcam, they can also access all your files and basically do anything else they want to your computer.

  34. The NSA is the least of your worries by Solandri · · Score: 1

    At least for half the population.

    Whom you're blocking with the piece of tape is pretty unimportant. The tape works against perverts, Microsoft, and the NSA all the same. There is simply no reason not to do it. (Which is equivalent to there being no for reason laptop vendors to not put a sliding cover over their camera, except it got eliminated as a cost-cutting measure.)

  35. Opsec by 101percent · · Score: 1

    As diretor of FBI is this the extent of his personal opsec? Honest people have been saying this for years. Eventually all the other shit FOSS and privacy folks have explained for years will become necessary and then we're fucked by then.

  36. Re:Disable the device by sittingnut · · Score: 1

    for Windows: Control Panel -> Device Manager -> Imaging Devices -> Right click on webcam, and select 'Disable'
    poof! no video or audio. Check occasionally to confirm it's still disabled.

    of course, you are being ironic.

    best way to disable webcam and mic is to block them physically.
    as next best thing, one can try removing software drivers used by device individually, but depending on os(any os) to disable them will not help that much.

  37. I did by waspleg · · Score: 1

    and he got fucked over by his own party since they were already in Hillary's pocket before he started. Unfortunately he decided not to go back to being an independent once he has people's attention.

  38. Its repugnantly nihilistic by meadow · · Score: 1

    Its repugnantly nihilistic to throw one's hands in the air and just "accept" that there might be some malevolent code running on one's computer, particularly coming from someone like the head of the FBI.

    It represents a failure. A failure to accept responsibility and know how one's computer works, a failure to understand the integrity of the applications that one uses, a failure to understand the integrity of the operating system, and many other things.

    Its not a wise nor prudent move, its failure.

    1. Re:Its repugnantly nihilistic by Feyshtey · · Score: 1

      And its a gross overstatement to expect that it is incumbent upon every person that uses a computer to be educated to the level you're suggesting. While there are certainly computer and security experts who do have that level of knowledge, skill and experience, they are in the vast minority of users. And this applies equally to your grandma and to low level clerical types that work in all forms of public service. While I would certainly hope that the computers in use by individuals handling classified data are being routinely examined and secured by the aforementioned experts, the user himself cannot be expected to hold to the same skill set. Their time is meant to be spent on matters of a much different nature, and it would be self-defeating for them to take that burden upon themselves. The machines should be controlled by the experts in such a way that the user cannot inadvertently present undue risk, and the user should be educated on basic user-level best practices and procedures. But what you're suggesting is akin to saying that every nurse and guard in your hospital must be capable of brain surgery. Even when speaking about the home computer of the head of the FBI (a computer that shouldn't contain anything work-related at all), it's perfectly reasonable to suggest that you do the little things that most anyone can grasp if told, while not being deluded enough to expect them to perform brain surgery.

      --
      "But we have to pass the bill so that you can find out what is in it,..." - Nancy Pelosi
    2. Re:Its repugnantly nihilistic by Cederic · · Score: 1

      I'm using Windows 10 at the moment, it's guaranteed to be fucking insecure. It's insecure by design.

      So I know there's malevolent code running on this computer, and I respond accordingly.

    3. Re:Its repugnantly nihilistic by execthis · · Score: 1

      I didn't mean to imply that the user has to have the technical knowledge. I agree that's not realistic. But I also don't think that it should be necessary for any user to have to have that knowledge but still not be able to rely upon the integrity of their system. If we are using such incredibly complex machines and don't have chains of integrity, assurance, or whatever else it can be called, that is a huge problem.

      I guess an analogy would be that every user of a credit card doesn't have to have a complete understanding of every technical component related to a transaction, but still has a relatively high level of assurance of the integrity of the card and its employment for purposes of payment.

    4. Re:Its repugnantly nihilistic by Maritz · · Score: 1

      Drama.

      --
      I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
    5. Re:Its repugnantly nihilistic by peawormsworth · · Score: 1

      I guess an analogy would be that every user of a credit card doesn't have to have a complete understanding of every technical component related to a transaction, but still has a relatively high level of assurance of the integrity of the card and its employment for purposes of payment.

      Bad example. Credit cards are easy to use incorrectly. In fact, they are designed to be used insecurely. When you use a credit card online, you are giving full information to the merchant on how it can be used again to make fraudulent purchases. I mean you give them your name, address, card number and CVV code, this is exactly what you need to commit fraud. So credit cards are designed to make fraud easy, even when the owner of the card uses it as it was designed.