3 ms·
If your threat model concerns with hardware/firmware exploits, then you can't trust the physical switches unless they cut all the wires - and unless you can val
by drdaeman 10y ago
If your threat model concerns with hardware/firmware exploits, then you can't trust the physical switches unless they cut all the wires - and unless you can validate that this is what they do. Theoretically speaking, a malicious (or threatened/persuaded/forced) manufacturer may implement a non-standard way to power the supposedly disconnected component using still-connected wiring, to be used for a special occasions.
/tinfoil
- nickpsecurity 10y agoYou should see my full write-up: https://news.ycombinator.com/item?id=10906999 https://news.ycombinator.com/item?id=10906999 I went into detail on what it takes on hardware side: https://news.ycombinator.com/item?id=10468624 https://news.ycombinator.com/item?id=10468624
- willholloway 10y agoAgreed, which is why I believe sound proof cases are the only sensible approach, and work with all current consumer devices.
- sametmax 10y agoThis is why I got a shutter on m laptop camera. It's mechanicl, and I can see it's on or off. It should be a legal obligation to provide those, for camera and mic.
- markokrajnc 10y agoRegarding "legal obligation": in some countries the government may be the second main user of your camera and mic - next to you...
- sametmax 10y agoThis is sadly true.
- jimhefferon 10y agoI want a DPDT switch that sits between the mic and the rest of the phone. That seems do-able to me. I use masking tape over the camera, so I'm looking for a similar microphone solution. (I don't want it inside the case, since I want to be able to flip the switch conveniently. Likewise, removing the battery is not what I want.)
- MrMid 10y agoWell, I just.. disconnected the mic in my laptop, the day it arrived (there is no webcam). As phones are concerned, I use my trusty SE ELM featurephone, so I'm not very worried about Googles, Facebooks, Samsunsungs...