Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230

Re:Malware can turn off webcam LED and record video, demonst... by 3eb7988a1663 on Wednesday November 27, 2024 @04:33PM (#42259996)

I believe it is possible to turn a speaker into a microphone. Found a paper which claims to do just that[0]. So, there is no safety anywhere?

  SPEAKE(a)R: Turn Speakers to Microphones for Fun and Profit
  It is possible to manipulate the headphones (or earphones) connected to a computer, silently turning them into a pair of eavesdropping microphones - with software alone. The same is also true for some types of loudspeakers. This paper focuses on this threat in a cyber-security context. We present SPEAKE(a)R, a software that can covertly turn the headphones connected to a PC into a microphone. We present technical background and explain why most of PCs and laptops are susceptible to this type of attack. We examine an attack scenario in which malware can use a computer as an eavesdropping device, even when a microphone is not present, muted, taped, or turned off. We measure the signal quality and the effective distance, and survey the defensive countermeasures.

[0] https://arxiv.org/abs/1611.07350

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by orbital-decay on Wednesday November 27, 2024 @04:45PM (#42260120)

This only works on audio chipsets that allow pin retasking. Which is, coincidentally, all Realtek chipsets that are present in every PC...

(you also need to plug the speaker directly, mostly limiting it to headphones and laptop speakers)

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by bluGill on Wednesday November 27, 2024 @04:54PM (#42260188)

Even where it works, speakers are much worse microphones that dedicated microphones, and so the amount of data that can be gathered is low. Why bother when you probably have a microphone on the same PC that can capture far more sound?

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by bobthebutcher on Wednesday November 27, 2024 @06:01PM (#42260677)

I think there was a long period where a proper PC would frequently have only the cheap stereo speakers which are small enough to far outperform raw microphone leads. But I'm not sure this works that well in >=HDMI even if some monitor speakers might otherwise be ideal.

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by KeplerBoy on Thursday November 28, 2024 @04:04AM (#42263745)

This isn't about audio fidelity, this just about getting audible spoken words, which is definitely possible even with the worst microphone.

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by NTARelix on Wednesday November 27, 2024 @05:13PM (#42260335)

I recall in the early or mid 2000s using some cheap earbuds plugged into the microphone port of my family computer as a pair of microphones in lieu of having a real microphone nor the money for one. Then I used Audacity to turn the terrible recording into a passable sound effect for the video games I was making.

Not knowing much about how soundcards work, I imagine it would be feasible to flash some soundcards with custom firmware to use the speaker port for input without the user knowing.

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by megraf on Wednesday November 27, 2024 @05:29PM (#42260449)

This is common at nightclubs (or was) - a DJ can use their headphones as a microphone, speaking into one channel and listening to another

Example https://m.youtube.com/watch?v=1NNP6AFkpjs

:-)

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by lelandfe on Thursday November 28, 2024 @10:02AM (#42265719)

You will still see DJs do this in NYC! Old school flavor. You can also see Skepta rapping into a pair on the the music video for That's Not Me: https://www.youtube.com/watch?v=_xQKWnvtg6c

I've seen some theatrical DJs bring a cheap pair, snap them in half, and then use them like a "lollipop." Crowd eats it up. Even older school: using a telephone handset: https://imgur.com/a/1fUghXY

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by lynndotpy on Wednesday November 27, 2024 @06:17PM (#42260779)

Despite this being a 2016 paper, it's worth noting that this is true in general and has been common(ish) knowledge among electrical engineers for decades. Highschoolers and undergrads in electrical engineering classes often discover this independently.

What's notable about this paper is only that they demonstrate it as a practical attack, rather than just a neat fun fact of audio engineering.

As a fun fact, an LED can also be used as a photometer. (You can verify this with just a multimeter, an LED, and a light source.) But I doubt there's any practical attack using a monitor as a photosensor.

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by nurple on Wednesday November 27, 2024 @09:33PM (#42261888)

Yes! LEDs as photometers is something that you don't really see around much anymore, but it is really cool. Even an LED matrix can be used as a self-illuminating proximity sensor with the right setup.

https://www.youtube.com/watch?v=GaAtpAuNN_o

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by Anechoic on Wednesday November 27, 2024 @10:23PM (#42262138)

and has been common(ish) knowledge among electrical engineers for decades.

Not only is it common knowledge it's how drive-thru kiosks work!

Source: I used to test microphone/speakers for a kiosk OEM.

[ Parent | on HN ]

Re:Malware can turn off webcam LED and record video, demonst... by ycombinatrix on Tuesday December 03, 2024 @08:57PM (#42313808)

Is it really a single unit that acts as both the speaker and mic? Can it do both simultaneously? Is that why it sounds so trash?

[ Parent | on HN ]