in ,

Bugs that let sites hijack Mac and iPhone cameras fetch $ 75k bounty, Ars Technica

Bugs that let sites hijack Mac and iPhone cameras fetch $ 75k bounty, Ars Technica
    

      I’LL BE WATCHING YOU –

             

Here’s how one researcher bypassed stringent restrictions Apple puts on webcam access.

      

                  

Ryan Pickren
A security bug that gave malicious hackers the ability to access the cameras of Macs, iPhones, and iPads has fetched a $ 432, 0 bounty to the researcher who discovered it.
In posts published here and
here , researcher Ryan Pickren said he discovered seven vulnerabilities in Safari and its Webkit browser engine that, when chained together, allowed malicious websites to turn on the cameras of Macs, iPhones , and iPads. Pickren privately reported the bugs, and Apple has since fixed the vulnerabilities and paid the researcher $ , (0 as part of the company bug bounty program.)
Apple tightly restricts the access that third-party apps get to device cameras. For Apple apps, the restrictions aren’t quite as stringent. Even then, Safari requires users to explicitly list the sites that are allowed camera access. And beyond that, cameras can only have access to those sites when they are delivered in a secure context , meaning when the browser has high confidence the page is being delivered through an HTTPS connection.

What do you think?

Leave a Reply

Your email address will not be published. Required fields are marked *

GIPHY App Key not set. Please check settings

Twitter Direct Message Caching and Firefox – Mozilla Hacks – the Web developer blog, Hacker News

Twitter Direct Message Caching and Firefox – Mozilla Hacks – the Web developer blog, Hacker News

SBA loan program glitches reveal challenge in rolling out billions in coronavirus aid – CNN, CNN

SBA loan program glitches reveal challenge in rolling out billions in coronavirus aid – CNN, CNN