Slashdot Mirror
Apple Says It Will Fix The FaceTime Bug That Allows You To Access Someone's iPhone Camera And Microphone Before They Pick Up (buzzfeednews.com)
Apple said Friday morning that it had a fix for a bug discovered in Apple's video and audio chat service FaceTime this week, which had allowed callers to access the microphone and front-facing video camera of the person they were calling, even if that person hadn't picked up. The security issue is fixed on its servers, the company said, but the iPhone software update to re-enable the feature for users won't be rolled out until next week. From a report: "We have fixed the Group FaceTime security bug on Apple's servers and we will issue a software update to re-enable the feature for users next week," Apple said in an emailed statement to BuzzFeed News. "We thank the Thompson family for reporting the bug. We sincerely apologize to our customers who were affected and all who were concerned about this security issue. We appreciate everyone's patience as we complete this process."
Oh, how the mighty have fallen.
Thanks. It is nice to get these small issues fixed.
-SuperKendall
Sure it is a big deal security lapse from Apple. So the received/found the problem, analysis the scope of it, stopped the service, sent out communication about the problem. Now they are applying a fix.
It seems like a responsible course of action.
I am sure people who hate Apple, because they were beaten up by a hipster a few years ago, will still fault Apple, and make them seem like a pile of idiots who cannot code themselves out of a paper bag. But these things happen, I am actually surprised it doesn't happen more often.
I am sure all you programmers out there who are smug that their code never got hacked. But is it really skill, or just being lucky, or your program isn't just that popular enough. It can often just be a bad day where your code has a security flaw in it, and coded so it would be difficult for the QC to find it. However within weeks of it being public it was was found as a problem. I myself never had my coded hacked, however this isn't a reason to pat myself on the back, or be smug and judgemental, as I have fixed things in my own code that could had been bad if I didn't catch it. And I never know what else I may have open.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
Permission to activate the microphone and camera of your device should not be granted or controlled by "the server". That is a sensor in the phone, and one related to user privacy. The only thing that should be able to activate that sensor is the user, interacting with the local app on the device -- not a security policy or setting on "the servers".
This is a huge defect and a result of bad security policies. What else on _your_ device can be remotely activated or disabled by Apple or some other 3rd party like Facebook?
Winning the popular vote is like saying "we got more hits in baseball, but we got less runs and lost, that's not fair, wawaeawawa."
Both candidates knew the rules of the games before they played, so fair is fair and like it or not,Trump won fairly.
You know it's bad when a 14 year old with no coding experience discovers a major security flaw bug a multi billion dollar tech company couldn't find, emails it to Apple tech support, then nothing happens for a week till it's headline news. People aren't going to keep buying into this North Korean business model if the prices continue to rise faster than hardware quality and the redeeming quality of security is reduced to being seen as far less secure.
You're under the false impression that the user owns the phone; the actual owner (Apple) can choose to do with it as it wants, including letting their servers decide when your sensors are active.
They do own the phone. The hardware is theirs and Apple cannot get it back. The SERVICES and software the phone uses are not owned by the user. They license or subscribe to those and whatever terms come with them. Yes, these are necessary for the device to be useful but that is a separate discussion from who owns the hardware. This is yet another example of why Apple is a software company, not a hardware company. The hardware is just the pretty box through which they sell their software and services.
"We thank the Thompson family for reporting the bug.
From all the billions [of dollars] in profit Apple makes, I wonder whether this family will collect. Anyone know?
That mere "thank you" message from Apple is anemic in my opinion.
This bug made face time like the old party line telephone connections. Anyone on your line can pick up and hear your call. Party lines relied on trust between neighbors not to eavesdrop.
BTW, a friend of mine had a party line long after they were common. He still got the reduced rate, but since no one else was on his party line, he effectively had a private line. WOOT!
It's a predictive video and audio caching algorithm. iOS 13 is rumored to add a feature that will pre-shatter your screen when the accelerometer detects the phone is falling.
I don't like to play entitled, but this sort of bug is the sort of bug that you stay up all night to fix immediately.
Liberty - Security - Laziness - Pick any two.
Both candidates knew the rules of the games before they played, so fair is fair and like it or not,Trump won fairly.
What? No he didn't. Even if Trump didn't know about it (which is unlikely, but let's posit) his campaign definitely colluded with Russia to manipulate the election illegally. There's nothing fair about that.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
The report on the "fix" reveals a fundamental design flaw. They say they fixed the issue ON THE SERVER.
That means the CLIENT on the phone is expected by design to start sending audio and video as soon as a call comes in (before you answer).
If it was anything like properly designed, the client would never under any circumstances transmit from the mic or the camera unless and until the called party chooses to answer.
So a patch for iOS7 for my iPhone 4 will be available soon?
#DeleteFacebook