How to protect yourself from camera and microphone hacks

[Brother]

According to a TechCrunch report, Apple turned off the Walkie Talkie audio chat feature in its smartwatch to fix a vulnerability that would allow someone to listen to users' opinions without their consent.

A few days earlier, a security researcher discovered a similar flaw in the Zoom video conferencing application, which can be used to trick Mac users into opening a video call, even if they had previously uninstalled Zoom. Both Apple and Zoom have released updates to address this issue.

There have been no reports of consumers falling prey to any of these vulnerabilities, and security flaws with connected cameras and microphones are nothing new. However, the news adds to users' fears about digital privacy. According to a nationally representative survey of over 1,000 adults conducted in May by Consumer Reports, forty-three percent of Americans who own smartphones believe their device records what they say when they haven't asked for it.

While targeted advertising works so well that it might seem like tech companies should be illegally recording your conversations, privacy and security experts say this isn't really happening - marketers have other, very effective ways to find out what might be of interest. of people.

On the other hand, there is a real, albeit remote, risk that hackers could take control of your devices' cameras and microphones, security experts say.

“These are the risks we take with these smart devices,” says Patrick Jackson, chief technology officer at Disconnect, a cybersecurity firm that collaborates with CR on investigations. "They have a lot of sensors and you don't always know if they're on or off." However, according to Jackson, there are a few simple steps you can take to protect yourself, no matter what brand of computer or smartphone you're using.

Don't use dedicated video and audio chat apps

“Every time you install a new app on your device, you add another hole to your system with more potential software vulnerabilities that hackers might try to exploit,” says Cody Feng, Security and Privacy Testing Project Leader at Consumer Reports ... “In digital security, we call this the 'attack surface'. Reducing this surface area is always a good idea. "

Most apps like Google Hangout, Skype, and Zoom allow you to make and receive calls by logging into their website in a web browser without downloading any special software. Using a browser instead of downloading an app is an easy way to stay a little safer.

A web browser is not inherently more secure, but the fewer applications you have on your computer that can access your camera and microphone, the fewer options you provide to hackers.

Check your device's permissions

All kinds of applications can ask for permission to access the camera, microphone, and other functions, such as location information, on your phone or computer. Using the steps below, it's easy to see which apps have asked for permission and revoke permissions you've given in the past.

“Make sure you know all the apps that have video and microphone permissions,” says Disconnect's Jackson.

Jackson recommends disabling any permissions that are not essential to your daily life. Thus, even if the application is hacked, an attacker cannot establish a direct connection to your camera or microphone without performing additional hacking.

On an Android phone: Open Phone Settings> Apps (or Apps & Notifications)> Advanced> App Permissions> Camera>. Tap the switch next to an app to revoke permission. Then go back and do the same in the Microphone menu. (These instructions may differ slightly depending on which phone you have.)

On iPhone: Go to Phone Settings> Privacy> Camera>. Click on the switch next to an app to revoke permission. Then go back and do the same in the Microphone menu.

On Mac: Go to Computer Settings> Security & Privacy> Privacy> Camera> Uncheck the box next to an app to revoke permission. Then go back and do the same in the Microphone menu.

On a PC: Go to Computer Settings> Privacy> Camera> Turn Off Camera Access, or use the switches next to individual apps to set permissions. Then go back and do the same in the Microphone menu.

Update your software and firmware

Updating software and firmware is critical to keeping your digital system secure. Sometimes, as with Apple Watch's Walkie Talkie issue, manufacturers automatically release updates to keep consumers safe when serious flaws are identified.

In other cases, as with the Zoom app, you may need to take additional steps to ensure protection. According to Zoom, users who are using the app can go to the site's Download Center to check for updates. Alternatively, open the app, click "zoom.us" in the upper left corner of the screen and select "Check for Updates".

“Don't wait until you hear about the issue to look for updates and install security updates immediately,” says Feng. Turn on automatic updates or check for updates frequently.

Ribbon method

There is a famous picture of Mark Zuckerberg with a laptop in the background, which has a piece of tape covering the camera. Doing the same with your computer is one path to peace of mind. If the tape looks too messy for you, you can buy stickers for this purpose.

“This method is great for video, but not for your microphone,” Jackson says. In fact, he says, built-in microphones are often designed to work even when covered. “With a microphone for your phone or laptop, you often have to rely on security software,” Jackson says.

However, you can try a so-called “microphone blocker,” essentially a dummy plug on the other side of which nothing is inserted into your device's headphone or microphone jack. Working as intended, the blocker tricks the device into thinking the microphone is plugged in and switch from the built-in microphone to the external one, so a hacker won't receive a signal if he gets into your system.

Microphone blockers are usually cheap, so if you're really worried about jailbroken microphones, consider this. Although it should be borne in mind that this does not always work and not on all devices.

Author: Vladimir Bezmaly