News for hackers. Stuff that matters.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by conductor on Thursday December 19, 2013 @04:36PM (#6938086)
Do these laptops have hardware on/off switches for the webcam and the microphone? If they don't, are there any such laptops? I couldn't find a modern and powerful full HD laptop which has no integrated mic and webcam (which I don't need).
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by mdip on Thursday December 19, 2013 @05:19PM (#6938334)
That would be an excellent feature and years ago I had a laptop that had a simple plastic sliding piece that would cover the camera lens. Later versions eliminated this piece (it probably broke off too frequently).

I have taped a piece of aluminum foil over every webcam on my laptops/iMac with a large piece of packing tape (making it possible to pull it aside when I do rather frequent video conferences).

I get dismissed as paranoid (or the next question that's asked is "what do you do in front of your computer!"). What they don't understand is that years ago I wrote software for a building access kiosk that involved a one-way video chat, followed with a photograph taken of the visitor. I used an open source library for interacting with the camera. When video was running, the light was on. I had the worst time getting the camera to take a picture, but after a bit of tinkering (read: shooting bullets randomly), I had it working. It was my coworker that noticed the light didn't come on when the picture was being taken. I had done something wrong (so wrong that every few pictures, the camera would stop working and wouldn't recover until the entire machine was rebooted). Though I've been writing software professionally for twenty years or so, I had never wrote code to interact with a web cam and yet had somehow managed to stumble upon this entirely by accident. It gave me the willies, so from that point forward, I covered my cameras with a bit of ugly aluminum foil.

I've never really worried about the microphone, but it would be nice to have some kind of hardware control to disable devices that can be used to record in that manner.

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by fidotron on Thursday December 19, 2013 @05:51PM (#6938546)
I've recently run into one where it's possible to make Android devices recognize the faces of people in front of the device via the front facing camera with no sign of this to the user. Someone has to actually start an app (which needs camera access) and it is possible for it to be killed, but I too did this entirely by accident and would now be super wary about it.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by Crito on Thursday December 19, 2013 @06:15PM (#6938693)
A few months ago I added a little tiny square of electrical tape over the front-facing camera in my phone. I never have a reason to take pictures of myself, so I'd rather that camera not exist at all.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by gcb1 on Thursday December 19, 2013 @06:27PM (#6938748)
do that with all my laptops. specially work issued ones ridden with remote access for IT.

a post it cut with just the glue part works fine, easy to replace and leaves no marks.

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by pyrocat on Thursday December 19, 2013 @10:13PM (#6939701)
Black electrical tape is a much sleeker solution.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by transitionality on Friday December 20, 2013 @07:36AM (#6941098)
You're most certainly not paranoid. Three-letter agencies have malware in the wild that can operate a webcam without turning on a light. It's probably well-targeted at specific people, but you can't know whether you're a target (until it's too late, anyway).

http://bgr.com/2013/12/18/apple-macbook-webcam-spying/

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by JoshTriplett on Thursday December 19, 2013 @04:41PM (#6938108)
I've never seen a laptop with either of those. Many webcams do have the activity light controlled in hardware, such that it isn't possible to record without a clear indicator. I haven't seen a microphone killswitch, though; most microphone mute buttons are software-based.

If you're that concerned and trust your software stack that little, it wouldn't be that hard to open up the system and physically disconnect the internal microphone, such that you can only use a 3.5mm or Bluetooth microphone. But if you trust your software stack that little, you have bigger problems. Efforts like the one in this article are a good step towards not having to worry about that kind of problem.

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by conductor on Thursday December 19, 2013 @04:48PM (#6938148)
> Many webcams do have the activity light controlled in hardware, such that it isn't possible to record without a clear indicator.

Yesterday's news show that some implementations can be unsecure [0].

> But if you trust your software stack that little, you have bigger problems.

I generally trust the software that I run on my main CPU but there are other threats like DMA malware [1] for example.

[0] - https://news.ycombinator.com/item?id=6929974

[1] - http://www.stewin.org/papers/dimvap15-stewin.pdf

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by vipstarry on Friday December 20, 2013 @12:01AM (#6940016)
That's only for a Macbook. You can't say the same is done for these X60 computers.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by exarch on Thursday December 19, 2013 @04:44PM (#6938127)
On the subject of the camera/microphone activity light and how it isn't possible to bypass, I'll just leave this here:

http://www.washingtonpost.com/blogs/the-switch/wp/2013/12/18...

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by csmuk on Thursday December 19, 2013 @05:12PM (#6938287)
The X60 that they advertise does not.

However, you can disconnect the hardware pretty easy. I've done this on my T400. Took about 5 mins with a Swiss army knife screwdriver (all you need to service a ThinkPad!).

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by GrinningFool on Friday December 20, 2013 @10:15AM (#6941726)
My alienware has a keyboard+Fn key for disabling the camera which is technically not hardware - but it seems to be handled in the bios.

When I use this under linux, it reports an unrecognized keycode; but at the same time the USB device reports as if disconnected, which I can see in dmesg. Close enough for me.

Re:Gluglug X60 Laptop now certified to Respect Your Freedom by rodgerd on Friday December 20, 2013 @02:23AM (#6940378)
You can certainly delete the webcam from T-series Thinkpads, which also have hardware switches for the wireless network. No ability to delete the microphone, alas.
Re:Gluglug X60 Laptop now certified to Respect Your Freedom by tedunangst on Thursday December 19, 2013 @04:59PM (#6938212)
I have a Thinkpad T430s (previous generation) with no camera or microphone built in.