zlacker

[return to "Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230"]
1. sbarre+T1[view] [source] 2024-11-27 20:27:36
>>xairy+(OP)
I thought the whole point of these camera LEDs was to have them wired to/through the power to the camera, so they are always on when the camera is getting power, no matter what.

Having the LED control exposed through the firmware completely defeats this.

◧◩
2. 542458+96[view] [source] 2024-11-27 20:54:08
>>sbarre+T1
They are hardwired on Macbooks. From Daring Fireball, quoting an email from an Apple engineer.

> All cameras after [2008] were different: The hardware team tied the LED to a hardware signal from the sensor: If the (I believe) vertical sync was active, the LED would light up. There is NO firmware control to disable/enable the LED. The actual firmware is indeed flashable, but the part is not a generic part and there are mechanisms in place to verify the image being flashed. […]

> So, no, I don’t believe that malware could be installed to enable the camera without lighting the LED. My concern would be a situation where a frame is captured so the LED is lit only for a very brief period of time.

https://daringfireball.net/2019/02/on_covering_webcams

◧◩◪
3. nine_k+YR[view] [source] 2024-11-28 05:05:19
>>542458+96
That's backwards.

The LED should be connected to camera's power, or maybe camera's "enable" signal. It should not be operable via any firmware in any way.

The led also has to be connected through a one-shot trigger (a transistor + a capacitor) so that it would light up, say, for at least 500 ms no matter how short the input pulse is. This would prevent making single shots hard to notice.

Doing that, of course, would incur a few cents more in BOM, and quite a bit more in being paranoid, well, I mean, customer-centric.

◧◩◪◨
4. jdblai+BY[view] [source] 2024-11-28 06:52:44
>>nine_k+YR
or, you can have a physical switch, like the Framework. that also hits your BOM but its not complex!
◧◩◪◨⬒
5. SiVal+F01[view] [source] 2024-11-28 07:13:10
>>jdblai+BY
Would a bit of Post-It Note (for minimal adhesion) damage the screen coating if left on most of the time? Would even that much thickness stress the screen when opened and closed thousands of times? Is there a better (self-service) material?
◧◩◪◨⬒⬓
6. cuu508+pf1[view] [source] 2024-11-28 10:16:53
>>SiVal+F01
> Would a bit of Post-It Note (for minimal adhesion) damage the screen coating if left on most of the time?

Possible, I have one IPS monitor with a spot on screen where the color is pale. I had a post-it note there and I guess something bad happened when I tore it off.

◧◩◪◨⬒⬓⬔
7. grvbck+2t1[view] [source] 2024-11-28 12:59:52
>>cuu508+pf1
I used electrical pvc tape for many years on my macbooks, no damage but I got tired of them leaving glue residue. Switched to post-its about 10 years ago, works perfectly.

I've never tried them on a matte or coated screen though.

◧◩◪◨⬒⬓⬔⧯
8. ARando+lJ1[view] [source] 2024-11-28 15:32:19
>>grvbck+2t1
I use painter’s tape for a similar effect.
[go to top]