Conversation

Found a

#security & #privacy issue. When the app is open it actively uses the camera. I found a bug in the app that lets you see the camera open behind your feed. Note that I had the camera pointed at the carpet.

0:17

229.9K views

7:47 AM · Nov 10, 2019

Bookmarks

Anyone seen this??

133

Update, I have been able to confirm this across 5 different iPhones all running 13.2.2. I will note that iPhones running iOS 12 don't show the camera (not to say that it's not being used).

266

Guy Rosen

@guyro

Nov 12, 2019

Thanks for flagging this. This sounds like a bug, we are looking into it.

Joshua Maddux

@JoshuaMaddux

Nov 12, 2019

Yes.... You are using this "bug" to look into peoples private lives. Haha

Show replies

Felix Krause

@KrauseFx

Nov 12, 2019

Fun times, I wrote about this exact threat 2 years ago 🙃 Maybe they decided it was a good idea krausefx.com/blog/ios-priva

Joshua Maddux

@JoshuaMaddux

Nov 12, 2019

Don't give them ideas... lol

Show replies

Roxana Nasoi (The Hat)

@roxananasoi

Nov 12, 2019

Facebook and Messenger are floating apps (you can drag them on top of other apps that require permissions). Would you mind doing an experiment and first deactivate the floating option (the "draw over other apps" function)? And then retest if this still happens?

Joshua Maddux

@JoshuaMaddux

Nov 12, 2019

I believe the "draw over other apps" only is an Android thing. This "bug" is on iPhone.

Show replies