The iOS privacy loophole

Felix Krause:

Once you grant an app access to your camera, it can:

  • access both the front and the back camera
  • record you at any time the app is in the foreground
  • take pictures and videos without telling you
  • upload the pictures/videos it takes immediately
  • run real-time face recognition to detect facial features or expressions

Have you ever used a social media app while using the bathroom? ?

All without indicating that your phone is recording you and your surrounding, no LEDs, no light or any other kind of indication.

The point is that when you grant an app access to your camera, you grant complete access. There is no granularity, no access limitation for a single task.

Is this paranoia? Perhaps. But seems like this is worth some thought.