Taggart Feb 22

Really solid breakdown of how known spyware does the thing we all worry about: hiding camera/mic indicators.

An important note I think is that this capability requires kernel-level access to hook Springboard (iOS's UI controller) and hide those indicators. In other words, something your Facebook app cannot do.

https://www.jamf.com/blog/predator-spyware-ios-recording-indicator-bypass-analysis/

How Predator Spyware Defeats iOS Recording Indicators

An analysis documenting how a commercial spyware sample, Predator, operates post-compromise.

Show threadAndrew ZonenbergFeb 22

@mttaggart why are mic/camera indicators, if present, software controllable at all?

A proper design will power gate the mic or camera in hardware when disabled and use that power rail or the enable signal directly to drive the LED. Compromised software could still start recording without user consent but it would not be possible to hide the indication.

Show threadTaggart 
@azonenberg I'm no EE but I imagine that, among other reasons, that mechanism wouldn't really afford for the passive listening for "Hey Siri," etc. But I really can't answer your question.
Feb 22 at 11:47pmWeb
Show threadAndrew ZonenbergFeb 22
@mttaggart I mean I don't like voice assistants in general and if i was using one i'd want an explicit PTT button
Show threadTaggart Feb 22
@azonenberg I certainly think your design sensibilities and Apple's differ, yes.