4 ms·
There was a backdoor that let the Uber iPhone app record the screen invisibly from the background that went unnoticed for years.
by user982 9y ago
There was a backdoor that let the Uber iPhone app record the screen invisibly from the background that went unnoticed for years.
- madeofpalk 9y agoWell no, Apple (in an unprecedented move), granted the Uber app the com.apple.private.allow-explicit-graphics-priority entitlement. "Apple gave us this permission because early versions of Apple Watch were unable to adequately handle the level of map rendering in the Uber app," an Uber representative, Melanie Ensign, told Business Insider. "Subsequent updates to Apple Watch and our app removed this dependency, and we're working with Apple to remove the API completely." Uber was doing other sneaky stuff to read the devices serial number (or other unique identifiers) and evade Apple's countermeasures, but that's seperate from this.
- user982 9y agoWhat is the meaningful difference, in the context of tedunangst's post, between an entitlement that allows surreptitious recording of video and a backdoor that allows surreptitious recording of audio?
- madeofpalk 9y agoUber's entitlement was always 'public'. Facebook doesn't hold any private entitlements that would allow it to record audio in the background without notifying the user.
- user982 9y agoYou have a pattern in this thread of answering questions other than the ones asked.
- dantiberian 9y agoI'm 95% sure that there will be an entitlement for recording audio without showing the red mic bar (look at the Phone app), but it won't be a public one. There is no way for a third party app to get past app review with a custom entitlement without explicit permission from Apple. I'd be very surprised if it even passed automated review when the app was uploaded.