Google developer Felix Krause recently discovered that the way Apple regulates its camera app on iOS allows apps to spy on users and upload footage to the internet. The root of the problem is that granting camera permission to an app gives it too much power.
Image courtesy of 9to5Mac.
When users allow an iOS app access to the camera, it can take photos and videos through both cameras and do so at any given moment while the app is open. The issue stems from Apple’s one-size-fits-all permission. Kraus suggests that it should at least separate the photo capture and upload permissions, as well as have an icon appear in the status bar when the app is taking photos.
He said in his proposal:
Offer a way to grant temporary access to the camera (e.g., to take and share one picture with a friend on a messaging app) [or] show an icon in the status bar that the camera is active, and force the status bar to be visible whenever an app accesses the camera.
Another proposal that he suggested uses a Mac-style LED on the front of the phone to light up the camera when it’s in use. However, with Apple unveiling a full-screen front with its latest iPhone X device, this idea may not work.
Kraus has reported the issue to Apple so we will see if any changes come in the next few weeks. In the meantime, be wary of what apps you allow camera permissions to.
Source: ExtremeTech and 9to5Mac
Advertisement
Learn more about Electronic Products Magazine
