AppleInsider Staff
Facebook on Wednesday updated its iOS app to address a flaw that inadvertently enabled a user's camera without their knowledge, a potential security issue first spotted last week.
As noted by The Verge, Facebook is portraying the now-rectified problem as a bug. The social network reportedly submitted fixes for the issue to Apple on Tuesday.
Discovered last week, the flaw in Facebook's iOS app inadvertently activated an iPhone's rear-facing camera in certain situations. Typically, users found the camera went live while browsing account pages or performing other actions not associated with picture taking or regular image capture.
Joshua Maddux posted evidence of the bug in a tweet on Nov. 9., demonstrating that a live video feed was opened in the Facebook app and hidden behind a photo or other onscreen content. Sliding foreground panels to the side displayed a small portion of the live feed, which appeared to be captured from a rear-facing image sensor.
Maddux was able to replicate the issue on multiple devices running iOS 13.2.2, though previous iOS versions were seemingly unaffected by the bug.
It should be noted that the app was operating within the iOS sandbox, meaning affected users had previously allowed access to camera hardware. Still, unintentional and inconspicuous activation of iPhone's imaging module is viewed as a serious threat to user security, especially when it involves a company widely criticized for numerous privacy snafus.
Facebook has yet to explain the matter publicly.
Christine McKee
Charles Martin
Oliver Haslam
William Gallagher
Sponsored Content
16 Comments
I’m certain it was an “honest” mistake.
“Fixes”
I've not used the app, but this was the last straw that pushed me over.
I deleted my account. Too many privacy violations from one company for me.
So did they FIX the issue (stop creating a live camera feed without letting the user know), or did they just “fix” the issue (do a better job at hiding the secret video feed like in previous iOS versions)? :s
It’s not about FB, it’s Apple.
When iOS is incapable of stopping these kind of loophole, how can we be feeling safe using all other apps?