Facebook app accesses iPhone camera without user's knowledge
Facebook is misusing the camera on the iPhone, with the app turning it on while users view their feed for reasons unknown.
The way the iOS Facebook app mismanages the iPhone's camera has been uncovered, one which may be a privacy risk. The app is shown to be using the camera on the iPhone while the user is browsing the app, even if they are not actively taking a photograph or performing some other task with any of the imaging sensors.
Posted to Twitter by Joshua Maddux and reported by The Next Web, opening a photo in the iOS app and swiping down will show a sliver of a live camera feed on the left-hand side of the display. Maddux has been able to reproduce the problem on five different iPhones running iOS 13.2.2, with the issue successfully reproduced by others.
While a potential issue, the camera only appears in this way if the iPhone is running iOS 13.2.2, as earlier iOS releases were unaffected. It also seems to only occur if the user has previously given Facebook permission to use the cameras, as otherwise it is blocked by the operating system.
Facebook has yet to comment about the discovery, but given the limited circumstances for it to manifest, it is likely the social network will play it off as a bug. It is plausible for Facebook to argue it needs to preemptively access the camera so it can be immediately available when the user actually needs it, rather than waiting for the camera to load.
While the situation may be innocent in nature, privacy critics of Facebook may consider it to be a more sinister issue.
In October 2017, it was demonstrated a malicious iOS app could feasibly spy on the user by recording from both front and rear iPhone cameras without their knowledge while they performed other functions in the app. The proof-of-concept app did require users to accept the request for camera access, but the concept app was constructed primarily to see how far the granted permissions could be pushed.
Facebook is also still recovering from the Cambridge Analytica scandal that cost it $5 billion and changes to its operation to make it more accountable for privacy-related decisions.
The way the iOS Facebook app mismanages the iPhone's camera has been uncovered, one which may be a privacy risk. The app is shown to be using the camera on the iPhone while the user is browsing the app, even if they are not actively taking a photograph or performing some other task with any of the imaging sensors.
Posted to Twitter by Joshua Maddux and reported by The Next Web, opening a photo in the iOS app and swiping down will show a sliver of a live camera feed on the left-hand side of the display. Maddux has been able to reproduce the problem on five different iPhones running iOS 13.2.2, with the issue successfully reproduced by others.
Found a @facebook #security & #privacy issue. When the app is open it actively uses the camera. I found a bug in the app that lets you see the camera open behind your feed. Note that I had the camera pointed at the carpet. pic.twitter.com/B8b9oE1nbl
-- Joshua Maddux (@JoshuaMaddux)
While a potential issue, the camera only appears in this way if the iPhone is running iOS 13.2.2, as earlier iOS releases were unaffected. It also seems to only occur if the user has previously given Facebook permission to use the cameras, as otherwise it is blocked by the operating system.
Facebook has yet to comment about the discovery, but given the limited circumstances for it to manifest, it is likely the social network will play it off as a bug. It is plausible for Facebook to argue it needs to preemptively access the camera so it can be immediately available when the user actually needs it, rather than waiting for the camera to load.
While the situation may be innocent in nature, privacy critics of Facebook may consider it to be a more sinister issue.
In October 2017, it was demonstrated a malicious iOS app could feasibly spy on the user by recording from both front and rear iPhone cameras without their knowledge while they performed other functions in the app. The proof-of-concept app did require users to accept the request for camera access, but the concept app was constructed primarily to see how far the granted permissions could be pushed.
Facebook is also still recovering from the Cambridge Analytica scandal that cost it $5 billion and changes to its operation to make it more accountable for privacy-related decisions.
Comments
Who in their right mind gives the FB app permission to use the camera and microphone? Then again, this is likely less severe than Google collecting personal health data on millions of people.
https://www.marketwatch.com/story/secret-google-project-is-collecting-personal-health-data-on-millions-of-people-2019-11-11?dist=bigcharts
Only apps that have asked for permission will be listed under each privacy topic.
It's not. And it's not all the news media. Paul Sperry of Real Clear Investigations named him. It's not against the law to name the whistleblower in this case. That applies only to the ICIG, and only in certain situations. The so-called "whistleblower" can have his name shared by anyone else, including elected officials. YouTube, Facebook and Twitter are engaging in ideological bias, as usual.
Just to make you happy, "whistleblowers are protected from work-related retaliation, including 'an appointment, promotion, or performance evaluation, or any other significant change in duties, responsibilities or working conditions. Revealing the whistleblower's name does not clearly fall under one of these categories.'
Taken from the CNN article; https://www.cnn.com/2019/11/08/politics/legal-question-out-whistleblower/index.html
CNN knows this is a bunch of BS. Now you know as well.