Hi Mark and listers,

For those that are beta testers,

Apple released a 12.2 beta (public) today and I believe this issue is corrected 
in it although I haven't tried it to check.
-----Original Message-----
From: [email protected] <[email protected]> On 
Behalf Of M. Taylor
Sent: Tuesday, 29 January 2019 6:24 PM
To: [email protected]
Subject: Major iPhone FaceTime bug lets you hear the audio of the person you 
are calling ... before they pick up, 9 to 5 Mac

Major iPhone FaceTime bug lets you hear the audio of the person you are calling 
. before they pick up By Benjamin Mayo 
 
A significant bug has been discovered in FaceTime and is currently spreading 
virally over social media. The bug lets you call anyone with FaceTime, and 
immediately hear the audio coming from their phone - before the person on the 
other end has accepted or rejected the incoming call. Apple says the issue will 
be addressed in a software update "later this week".
Naturally, this poses a pretty privacy problem as you can essentially listen in 
on any iOS user, although it still rings like normal, so you can't be 100% 
covert about it. Nevertheless, there is no indication on the recipient's side 
that you could hear any of their audio.
Update: There's a second part to this which can expose video too .
9to5Mac has reproduced the FaceTime bug with an iPhone X calling an iPhone XR, 
but it is believed to affect any pair of iOS devices running iOS 12.1 or later.
Here's how to do the iPhone FaceTime bug:
.       Start a FaceTime Video call with an iPhone contact.
.       Whilst the call is dialling, swipe up from the bottom of the screen
and tap Add Person.
.       Add your own phone number in the Add Person screen.
.       You will then start a group FaceTime call including yourself and the
audio of the person you originally called, even if they haven't accepted the 
call yet.
It will look like in the UI like the other person has joined the group chat, 
but on their actual device it will still be ringing on the lockscreen.
 
Whilst the call is ringing, swipe up from the bottom of the screen and add 
yourself to the call.
The damage potential here is real. You can listen in to soundbites of any 
iPhone user's ongoing conversation without them ever knowing that you could 
hear them. Until Apple fixes the bug, it's not clear how to defend yourself 
against this attack either aside from disabling FaceTime altogether.
As it stands, if your phone is ringing with an incoming FaceTime request, the 
person on the other end could be listening in.
What we have also found is that if the person presses the Power button from the 
lock screen, their video is also sent to the caller - unbeknownst to them. In 
this situation, the receiver can now hear your own audio, but they do not know 
they are transmitting their audio and video back to you. From their 
perspective, all they can see is accept and decline. (Another update:
It seems there are other ways of triggering the video feed eavesdrop too.) We 
have also replicated the problem with an iPhone calling a Mac. By default, the 
Mac rings for longer than a phone so it can act as a bug for an even longer 
duration.
Apple has said the issue will be fixed in a software update later in the week. 
Until then, if you are concerned, you should disable FaceTime in iOS Settings.

Original Article at:
https://9to5mac.com/2019/01/28/facetime-bug-hear-audio/



--
The following information is important for all members of the Mac Visionaries 
list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your Mac Visionaries list moderator is Mark Taylor.  You can reach mark at:  
[email protected] and your owner is Cara Quinn - you can reach Cara at 
[email protected]

The archives for this list can be searched at:
http://www.mail-archive.com/[email protected]/
---
You received this message because you are subscribed to the Google Groups 
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/macvisionaries.
For more options, visit https://groups.google.com/d/optout.

-- 
The following information is important for all members of the Mac Visionaries 
list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your Mac Visionaries list moderator is Mark Taylor.  You can reach mark at:  
[email protected] and your owner is Cara Quinn - you can reach Cara at 
[email protected]

The archives for this list can be searched at:
http://www.mail-archive.com/[email protected]/
--- 
You received this message because you are subscribed to the Google Groups 
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/macvisionaries.
For more options, visit https://groups.google.com/d/optout.

Reply via email to