Disable FaceTime. Miscreants can snoop on your iPhone, Mac mic before you pick up call

Institute For Ethical Hacking Course and Ethical Hacking Training in Pune – India

Extreme Hacking | Sadik Shaikh | Cyber Suraksha Abhiyan

Credits: The Register

You might want to disable FaceTime on your iPhone, iPad, or Mac until Apple patches this bonkers bug.

Folks have confirmed it is possible to call someone via FaceTime, and secretly listen in on their iThing or Mac’s microphone before they accept or reject a call. It’s a handy, creepy way to find out what someone’s up to before they answer. We’re told iOS 12.1 and 12.2, and macOS Mojave are vulnerable at least.

There’s no indication, on screen or otherwise, that this eavesdropping is happening to your victim. It’s even possible to snoop on the video camera.

Here’s the steps to reproduce the security blunder: on an iPhone, video call a contact using FaceTime on a vulnerable device, and while connecting, swipe up and add a person to the call. Then add your number, and your group call will secretly pipe in the other person’s microphone audio, even if they haven’t responded yet.

Incredibly, if the callee hits the power button, the front-facing camera feed is also secretly shown to the caller, though the caller can now hear your audio. Here’s a video doing the rounds demonstrating the hack:

Apple reckons it’ll push out a software fix for this privacy gaffe later this week. Instructions on disabling FaceTime in the meantime are here.

www.extremehacking.org

Sadik Shaikh | Cyber Suraksha Abhiyan, Ethical Hacking Training Institute, CEHv10,CHFI,ECSAv10,CAST,ENSA, CCNA, CCNA SECURITY,MCITP,RHCE,CHECKPOINT, ASA FIREWALL,VMWARE,CLOUD,ANDROID,IPHONE,NETWORKING HARDWARE,TRAINING INSTITUTE IN PUNE, Certified Ethical Hacking,Center For Advanced Security Training in India, ceh v10 course in Pune-India, ceh certification in pune-India, ceh v10 training in Pune-India, Ethical Hacking Course in Pune-India

The post Disable FaceTime. Miscreants can snoop on your iPhone, Mac mic before you pick up call appeared first on Extreme Hacking | Sadik Shaikh | Cyber Suraksha Abhiyan | Hackers Charity.



from Extreme Hacking | Sadik Shaikh | Cyber Suraksha Abhiyan | Hackers Charity http://bit.ly/2sVpxPC