4 ms·
Hi! I was the security architect for this feature on recent Macs. The LED is wired to the camera PMIC and is powered by the voltage rail that powers the camera
by axoltl 6y ago
Hi!
I was the security architect for this feature on recent Macs. The LED is wired to the camera PMIC and is powered by the voltage rail that powers the camera. The PMIC will always remain on if the system has power. Macs newer than 4 or so years also have a feature that forces the LED to stay lit for at least 3 seconds after it has been turned on to prevent the single-frame-grab attack.
- dasudasu 6y agoSo you have to perpetually watch out for the LED indicator to see if it ever randomly turns on for 3 seconds? And what if it does come up unexpectedly? At this point it's too late and you've already been captured. A mechanical cover that can slide on and off the camera seems like much better security.
- valuearb 6y agoExcept that people will forget to use them
- mthoms 6y agoYou don't "have to" do anything. The point is that the hardware has been designed properly. Combined with the OS-level permissions, it should be assurance enough for the majority of use cases. If you need further assurances, then by all means, use a physical cover.
- dasudasu 6y agoThe claim was that single-frame grab attempts are prevented by an indicator that stays on for 3 seconds. First, you do have to be alert for all of these potential 3 seconds windows, and second, it doesn't prevent anything but only tell you that it has already happened.
- saagarjha 6y agoNo, it wasn't. The claim was whether it was implemented correctly, as the entire conversation started with examples where it was not implemented correctly.
- smsm42 6y agoProperly designed hardware would add one small - and in every way possible, since we've already identified the circuit that drives the single power source - addition. A physical switch that prevents camera from being turned on. Same for the microphone. Unfortunately, this is never done. So people put covers on.
- ggus 6y ago> to prevent the single-frame-grab attack. prevent? by the time the LED turns on, the attack has already happened.
- prerok 6y agoI am wondering: how does Mac know whether you are in a light room or a dark room to adjust its screen's brightness without activating the camera?
- moe 6y agoOut of curiosity... Do the doors at Apple HQ have locks? Or is there just a little LED next to them that lights up when they open?
- saagarjha 6y agoThere is a little LED that lights up when they open. The door latch is controlled via software and so is the light, though I would assume in the case of power failure they'd unlock for fire safety reasons.
- moe 6y agoOk. So there is not only a LED, but a physical latch. I think Apple's building security architect should have a conversation with their camera security architect.
- saagarjha 6y agoI know where you were going with that, but the situation is different than what you’re trying to show. On Macs the light is on the path of the camera: if it is on the camera is, if it is not then the camera is not. Whereas with the door you might think that if it was latchless someone could just push it open when the light was off. The camera light is really a door alarm, not a door latch. (And as I just mentioned, doors with an alarm but no lock often do exist, usually for fire safety reasons).
- moe 6y agoNo, the situation is in fact the exact same. A door without a latch does not prevent an unauthorized person from trespassing. A camera without a cover does not prevent an unauthorized person from trespassing. Apples webcams are broken by design. Other companies fixed theirs years ago: https://www.youtube.com/watch?v=37NFVGLX3vw https://www.youtube.com/watch?v=37NFVGLX3vw
- causality0 6y agoAh, good. Is the microphone similarly protected? Sometimes I feel I must be the only person on earth who doesn't use their laptop while naked and couldn't care less if the imager was watching me. The microphone, however, could be an actual security threat. Phone calls, muttered passwords, etc.