Major iPhone FaceTime bug lets you hear the audio of the person you are
calling . before they pick up
By Benjamin Mayo 
 
A significant bug has been discovered in FaceTime and is currently spreading
virally over social media. The bug lets you call anyone with FaceTime, and
immediately hear the audio coming from their phone - before the person on
the other end has accepted or rejected the incoming call. Apple says the
issue will be addressed in a software update "later this week".
Naturally, this poses a pretty privacy problem as you can essentially listen
in on any iOS user, although it still rings like normal, so you can't be
100% covert about it. Nevertheless, there is no indication on the
recipient's side that you could hear any of their audio.
Update: There's a second part to this which can expose video too .
9to5Mac has reproduced the FaceTime bug with an iPhone X calling an iPhone
XR, but it is believed to affect any pair of iOS devices running iOS 12.1 or
later.
Here's how to do the iPhone FaceTime bug:
.       Start a FaceTime Video call with an iPhone contact.
.       Whilst the call is dialling, swipe up from the bottom of the screen
and tap Add Person.
.       Add your own phone number in the Add Person screen.
.       You will then start a group FaceTime call including yourself and the
audio of the person you originally called, even if they haven't accepted the
call yet.
It will look like in the UI like the other person has joined the group chat,
but on their actual device it will still be ringing on the lockscreen.
 
Whilst the call is ringing, swipe up from the bottom of the screen and add
yourself to the call.
The damage potential here is real. You can listen in to soundbites of any
iPhone user's ongoing conversation without them ever knowing that you could
hear them. Until Apple fixes the bug, it's not clear how to defend yourself
against this attack either aside from disabling FaceTime altogether.
As it stands, if your phone is ringing with an incoming FaceTime request,
the person on the other end could be listening in.
What we have also found is that if the person presses the Power button from
the lock screen, their video is also sent to the caller - unbeknownst to
them. In this situation, the receiver can now hear your own audio, but they
do not know they are transmitting their audio and video back to you. From
their perspective, all they can see is accept and decline. (Another update:
It seems there are other ways of triggering the video feed eavesdrop too.)
We have also replicated the problem with an iPhone calling a Mac. By
default, the Mac rings for longer than a phone so it can act as a bug for an
even longer duration.
Apple has said the issue will be fixed in a software update later in the
week. Until then, if you are concerned, you should disable FaceTime in iOS
Settings.

Original Article at:
https://9to5mac.com/2019/01/28/facetime-bug-hear-audio/



-- 
The following information is important for all members of the Mac Visionaries 
list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your Mac Visionaries list moderator is Mark Taylor.  You can reach mark at:  
[email protected] and your owner is Cara Quinn - you can reach Cara at 
[email protected]

The archives for this list can be searched at:
http://www.mail-archive.com/[email protected]/
--- 
You received this message because you are subscribed to the Google Groups 
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/macvisionaries.
For more options, visit https://groups.google.com/d/optout.

Reply via email to