News for hackers. Stuff that matters.
Re:Malware can turn off webcam LED and record video, demonst... by II2II on Wednesday November 27, 2024 @09:22PM (#42261823)
> and no firmware is involved in enforcing the LED stay on for 3 seconds after a single frame is captured.

I may be the oddball here, but that 3 second duration does not comfort me. The only time I would notice it is if I am sitting in front of the computer. While someone snapping a photo of me while working is disconcerting, it is not the end of the world. Someone snapping photos while I am away from the screen is more troublesome. (Or it would be if my computer was facing an open space, which it doesn't.)

Re:Malware can turn off webcam LED and record video, demonst... by jstanley on Wednesday November 27, 2024 @09:34PM (#42261896)
OK, but then what? Leave the LED on for 24 hours after you've captured a single frame? At that point the LED isn't really indicating camera usage because you'll just get used to seeing it on all the time whether the camera is in use or not.
Re:Malware can turn off webcam LED and record video, demonst... by II2II on Friday November 29, 2024 @09:06AM (#42273960)
A ranfom thought, that probably won't cover all cases: a second LED or a colour LED. One LED/colour indicates the camera is active, the second can be on for a longer period of time (and perhaps dim as time goes on). I prefer the second LED option since it is better for us colourblind folks, though I suspect there would be more resistance to the idea.

And, of course, covers are an option.

Re:Malware can turn off webcam LED and record video, demonst... by axoltl on Wednesday November 27, 2024 @11:09PM (#42262362)
Right, so this is all defense in depth. That LED is sort of the last line of defense if all others have failed, like:

The exploit mitigations to prevent you from getting an initial foothold.

The sandboxing preventing you from going from a low-privileged to a privileged process.

The permissions model preventing unauthorized camera access in the first place.

The kernel hardening to stop you from poking at the co-processor registers.

etc. etc.

If all those things have failed, the last thing to at least give you a chance of noticing the compromise, that's that LED. And that's why it stays on for 3 seconds, all to increase the chances of you noticing something is off. But things had to have gone pretty sideways before that particular hail-mary kicks in.

Re:Malware can turn off webcam LED and record video, demonst... by tehjoker on Wednesday November 27, 2024 @09:46PM (#42261947)
It's strange that none of these companies will include a closable cover for the camera. I got one aftermarket. It is very reassuring since no hacking or accidental misclicks on my part can move the cover.
Re:Malware can turn off webcam LED and record video, demonst... by mkl on Wednesday November 27, 2024 @10:22PM (#42262133)
I've seen HP desktops that have a closeable camera cover, and Lenovo does on some ThinkPads [1], so probably others do too. Laptops usually have very little depth available in the screen part though, which is why most laptop cameras are crappy (exceptions include Surface Pro and Surface Book, which have more depth available and so much better cameras than most, but no cover - at least their camera light is not software controlled).

[1] https://www.businessinsider.com/lenovo-thinkshutter-laptops-...

Re:Malware can turn off webcam LED and record video, demonst... by whartung on Wednesday November 27, 2024 @11:22PM (#42262435)
I have a sticky piece of post it note more or less permanently affixed over my camera.
Re:Malware can turn off webcam LED and record video, demonst... by throwaway2037 on Thursday November 28, 2024 @01:54AM (#42263046)
I can remember when someone spotted tape over Zuckerberg's laptop camera. Ref: https://www.theverge.com/2016/6/21/11995032/mark-zuckerberg-...
Re:Malware can turn off webcam LED and record video, demonst... by sunnybeetroot on Wednesday November 27, 2024 @10:20PM (#42262126)
I had a closable cover and someone shut my laptop with enough force that the cover caused the screen to break. Be careful when closing.
Re:Malware can turn off webcam LED and record video, demonst... by II2II on Thursday November 28, 2024 @08:25AM (#42265093)
Sure, that is going.to be true for anything with moving pats. Yet I would also imagine that design and materials are a factor here. Let's face it, these covers aren't exactly common on laptops. There is probably a lack of good design practices for them.
Re:Malware can turn off webcam LED and record video, demonst... by zlsa on Thursday November 28, 2024 @03:55PM (#42268470)
Was it a built-in camera cover, or a third-party one? Apple specifically (and possibly other manufacturers?) recommends against third-party covers because the tolerance is so close:

https://support.apple.com/en-us/102177

Re:Malware can turn off webcam LED and record video, demonst... by cozzyd on Thursday November 28, 2024 @12:33AM (#42262730)
My Thinkpad does.
Re:Malware can turn off webcam LED and record video, demonst... by nanomonkey on Thursday November 28, 2024 @01:44AM (#42262996)
I also purchased a cover for mine, although in a pinch, the removable stickers on fruit work well.
Re:Malware can turn off webcam LED and record video, demonst... by quacksilver on Thursday November 28, 2024 @09:00AM (#42265305)
Higher end Lenovos and Dell Latitude / Precision tend to. Was one reason why I went for a Latitude 74XX rather than a 54XX or 34XX when looking at them last time.