【Thailand Archives】

Well this is Thailand Archivesa serious problem.

A major bug has been discovered in iOS that lets a caller hear and see a person on the other end of a FaceTime call before the call has been answered. That's right, this massive security screwup means you can take a digital peek into another person's life — completely without their knowledge.

As 9to5 Mac reports, the bug is simple to exploit. First, you call someone on FaceTime. Next, before they answer, swipe up and add yourself to the call. That's it. You can hear through the person's phone, all without them answering the call.

This reporter tested the bug out on a willing participant, and was immediately able to hear the audio on the other end. And, shockingly, shortly after the call began the recipient hit the power button to end the call — and then the camera began sending back video. Meaning, I could see and hear the person who had notanswered the FaceTime call.

Interestingly, the person on the other end of this test call could also hear me, though she said she couldn't see me (to be fair, I do cover my front-facing camera with a sticker).

UPDATE: Jan. 28, 2019, 5:11 p.m. PT: An Apple spokesperson provided the following comment: "We’re aware of this issue and we have identified a fix that will be released in a software update later this week."

In other words, for the next week (at least) you definitely need a front-facing camera cover. Oh, and maybe watch what you say before you answer any FaceTime calls. That, or simply disable FaceTime.

UPDATE: Jan. 28, 2019, 6:22 p.m. PT: Noted security researcher and co-founder of Digita Security Patrick Wardle tweeted a screenshot showing what looks to be an attempt from an unknown number trying to remotely access his camera via the FaceTime bug.

This Tweet is currently unavailable. It might be loading or has been removed.

UPDATE: Jan. 29, 2019, 9:03 a.m. PST: Following numerous media reports of the FaceTime bug, Apple disabled group FaceTime at 7:16 p.m. on Jan. 28.

(Editor: {typename type="name"/})