iSeeYou: Disabling the MacBook webcam indicator LED

Proceedings of the 23rd USENIX Security Symposium

Volumn , Issue , 2014, Pages 337-352

  Brocker, Matthew ^a   Checkoway, Stephen ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CAMERAS; FIRMWARE; MALWARE; NETWORK SECURITY; USER INTERFACES; VIRTUAL MACHINE; VIRTUAL REALITY;

HUMAN INTERFACE DEVICES; SHELL COMMAND; USER SPACES; WEBCAMS; X-KERNEL;

LIGHT EMITTING DIODES;

EID: 84938984232     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (64)

1. Nate Anderson. Meet the men who spy on women through their webcams. ars technica, March 2013. Online: http://arstechnica.com/tech-policy/2013/03/rat-breeders-meet-the-men-who-spy-on-women-through-their-webcams/.
2. I/O Kit Fundamentals: Driver and Device Matching. Apple Inc., May 2007. Online: https://developer.apple.com/library/mac/#documentation/devicedrivers/conceptual/IOKitFundamentals/Matching/Matching.html.
3. QTKit Framework Reference. Apple Inc., February 2009. Online: http://developer.apple.com/library/mac/#documentation/QuickTime/Reference/QTCocoaObjCKit/_index.html.
4. App Sandbox Design Guide. Apple Inc., March 2013. Online: http://developer.apple.com/library/mac/#documentation/Security/Conceptual/AppSandboxDesignGuide/AboutAppSandbox/AboutAppSandbox.html.
5. Ballard Spahr. Lower Merion School District foren-sics analysis: Initial LANrev system findings, May 2010. Online: http://www.scribd.com/doc/30891576/LMSD-Initial-LANrev-System-findings. Redacted.
6. Ballard Spahr. Report of independent investigation: Regarding remote monitoring of student laptop computers by the Lower Merion School District, May 2010. Online: http://www.social-engineer.org/resources/100503_ballard_spahr_report.pdf.
7. Étienne Bersac. iSight Firmware Tools. October 2009. Online: https://launchpad.net/isight-firmware-tools.
8. Bio ID, Inc. The easy, secure way to log in and manage online identities and accounts. 2013. Online: http://mybioid.com/index.php?id=67. Last accessed: 2013-08-06.
9. Matt Brian. Android 4.0 Face Unlock feature defeated using a photo. The Next Web, November 2011. Online: http://thenextweb.com/google/2011/11/11/android-4-0-face-unlock-feature-defeated-using-a-photo-video/.
10. camJAMR.com. camJAMR.com webcam covers. 2012. Online: http://store.camjamr.com/shop-now/camjamr-webcam-covers.html. Last accessed: 2013-08-07.
11. Stephen Checkoway, Damon McCoy, Danny Anderson, Brian Kantor, Hovav Shacham, Stefan Savage, Karl Koscher, Alexei Czeskis, Franziska Roesner, and Tadayoshi Kohno. Comprehensive experimental analyses of automotive attack surfaces. In David Wagner, editor, Proceedings of USENIX Security 2011. USENIX, August 2011. Online: http://www.autosec.org/pubs/cars-usenixsec2011.pdf.
12. CoreLabs, Core Security Technologies. Apple OS X Sandbox predefined profiles bypass. November 2011. Online: http://www.coresecurity.com/content/apple-osx-sandbox-bypass.
13. EZ-USB® Technical Reference Manual. Cypress Semiconductor Corporation, 2011. Online: http://www.cypress.com/?docID=27095&dlm=1.
14. Cypress Semiconductor Corporation. CY3684 EZ-USB FX2LP Development Kit. 2013. Online: http://www.cypress.com/?rID=14321.
15. Alex Dobuzinskis. California man agrees to plead guilty to extortion of Miss Teen USA. Reuters, October 2013. Online: http://www.reuters.com/article/2013/10/31/us-usa-missteen-extortion-idUSBRE99U1G520131031.
16. Nguyen Minh Duc and Bui Quang Minh. Your face is NOT your password: Face authentication bypassing Lenovo - Asus - Toshiba. Presented at BlackHat Briefings, July 2009. Online: https://www.blackhat.com/html/bh-usa-09/bh-us-09-main.html.
17. Loïc Duflot and Yves-Alexis Perez. Can you still trust your network card? Presented at CanSecWest 2010, March 2010. Online: http://www.ssi.gouv.fr/IMG/pdf/csw-trustnetworkcard.pdf.
18. Loïc Duflot, Yves-Alexis Perez, and Benjamin Morin. What if you can't trust your network card? In Robin Sommer, Davide Balzarotti, and Gregor Maier, editors, Proceedings of RAID 2011, pages 378-397. Springer, September 2011. Online: http://www.ssi.gouv.fr/IMG/pdf/paper.pdf.
19. Monta Elkins. Hacking with hardware: Introducing the universal RF USB keyboard emulation device: URFUKED. Presented at DefCon 18, August 2010. Online: http://www.youtube.com/watch?v=EayD3V77dI4.
20. William Enck, Peter Gilbert, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick Mc-Daniel, and Anmol N. Sheth. TaintDroid: An information-flow tracking system for realtime privacy monitoring on smartphones. In Remzi Arpaci-Dusseau and Brad Chen, editors, Proceedings of OSDI 2010. USENIX, October 2010. Online: http://static.usenix.org/events/osdi10/tech/full_papers/Enck.pdf.
21. Dan Farmer. IPMI: Freight train to hell, January 2013. Online: http://fish2.com/ipmi/itrain.pdf.
22. Clint Gibler, Jonathan Crussell, Jeremy Erickson, and Hao Chen. AndroidLeaks: Automatically detecting potential privacy leaks in Android applications on a large scale. In Stefan Katzenbeisser, Edgar Weippl, L. Jean Camp, Melanie Volkamer, Mike Reiter, and Xinwen Zhang, editors, Trust and Trustworthy Computing, Volume 7344 of Lecture Notes in Computer Science, pages 291-307. Springer Berlin Heidelberg, 2012. doi:10.1007/978-3-642-30921-2_17.
23. Jeremiah Grossman. Clickjacking: Web pages can see and hear you. October 2008. Online: http://jeremiahgrossman.blogspot.com/2008/10/clickjacking-web-pages-can-see-and-hear.html.
24. Hugh Hart. April 14, 1996: JenniCam starts lifecasting. Wired Magazine, April 2010. Online: http://www.wired.com/thisdayintech/2010/04/0414jennicam-launches/.
25. Hex-Rays. IDA: About. January 2014. Online: https://www.hex-rays.com/products/ida/.
26. Peter Hornyack, Seungyeop Han, Jaeyeon Jung, Stuart Schechter, and David Wetherall. 'These aren't the droids you're looking for': Retrofitting Android to protect data from imperious applications. In George Danezis and Vitaly Shmatikov, editors, Proceedings of CCS 2011. ACM Press, October 2011. Online: https://research.microsoft.com/pubs/149596/AppFence.pdf.
27. Jon Howell and Stuart Schechter. What you see is what they get: Protecting users from unwanted use of microphones, cameras, and other sensors. In Collin Jackson, editor, Proceedings of W2SP 2010. IEEE Computer Society, May 2010. Online: https://research.microsoft.com/pubs/131132/devices-camera-ready.pdf.
28. iFixit. MacBook Pro Retina Display tear-down. 2013. Online: http://www.ifixit.com/Teardown/MacBook+Pro+Retina+Display+Teardown/9493.
29. Samson Technologies Inc. Meteor Mic - USB Studio Microphone. 2013. Online: http://www.samsontech.com/samson/products/microphones/usb-microphones/meteormic/.
30. David Kennedy and Josh Kelley. PowerShell omfg. ⋯ Presented at DefCon 18, August 2010. Online: http://www.youtube.com/watch?v=eWoAGxh0a_Q.
31. Jinyung Kim, Yongho Yoon, Kwangkeun Yi, and Junbum Shin. ScanDal: Stack analyzer for detecting privacy leaks in android applications. In Hao Chen and Larry Koved, editors, Proceedings of MOST 2013. IEEE Computer Society, May 2013. Online: http://www.mostconf.org/2012/papers/26.pdf.
32. Nicholas S. Kovach. Accelerating malware detection via a graphics processing unit. Master's thesis, Air Force Institute of Technology, September 2010.
33. Evangelos Ladakis, Lazaros Koromilas, Giorgos Vasiliadis, Michalis Polychronakis, and Sotiris Ioannidis. You can type, but you can't hide: A stealthy GPU-based keylogger. In Thorsten Holz and Sotiris Ioannidis, editors, Proceedings of EuroSec 2013. ACM, April 2013. Online: http://www.cs.columbia.edu/~mikepo/papers/gpukeylogger.eurosec13.pdf.
34. Luxland, Inc. Detect and recognize faces with Luxand FaceSDK. 2013. Online: http://luxand.com/facesdk/index_c.php. Last accessed: 2013-08-06.
35. Mactaris. Webcam Settings 2.0 will support FaceTime HD camera on MacBook Air 2013. July 2013. Online: http://mactaris.blogspot.com/2013/07/webcam-settings-20-will-support.html.
36. Philip Marquardt, Arunabh Verma, Henry Carter, and Patrick Traynor. (sp)iPhone: Decoding vibrations from nearby keyboards using mobile phone accelerometers. In George Danezis and Vitaly Shmatikov, editors, Proceedings of CCS 2011. ACM Press, October 2011. Online: http://www.cc.gatech.edu/~traynor/papers/traynor-ccs11.pdf.
37. 1/6-Inch SOC VGA CMOS Digital Image Sensor: MT9V11212ASTC. Micron Technology, Inc., 2005. Online: http://download.micron.com/pdf/datasheets/imaging/MT9V112.pdf.
38. Charlie Miller. Owning the fanboys: Hacking Mac OSX. Presented at Black Hat Japan Briefings, October 2008. Online: https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Miller/BlackHat-Japan-08-Miller-Hacking-OSX.pdf.
39. Charlie Miller. Battery firmware hacking: Inside the innards of a smart battery. Presented at Black Hat Briefings, August 2011. Online: http://media.blackhat.com/bh-us-11/Miller/BH_US_11_Miller_Battery_Firmware_Public_WP.pdf.
40. Emiliano Miluzzo, Alexander Varshavsky, Suhrid Balakrishnan, and Romit Roy Choudhury. Tap-Prints: Your finger taps have fingerprints. In Srinivasan Seshan and Lin Zhong, editors, Proceedings of MobiSys 2012. ACM Press, June 2012. Online: http://synrg.ee.duke.edu/papers/tapprints-final.pdf.
41. HD Moore. A penetration tester's guide to IPMI and BMCs. July 2013. Online: https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-penetration-testers-guide-to-ipmi.
42. Martha T. Moore. Pa. school district's webcam surveillance focus of suit. USA Today, May 2010. Online: http://usatoday30.usatoday.com/tech/news/surveillance/2010-05-02-school-spy_N.htm.
43. Andy O'Donnell. How to secure your webcam in less than 2 seconds. March 2011. Online: http://netsecurity.about.com/b/2011/03/25/how-to-secure-your-webcam-in-less-than-2-seconds.htm.
44. Devon O'Neil. Reflecting on Tony Hawk's 900. ESPN, May 2014. Online: http://xgames.espn.go.com/events/2014/austin/article/10622648/twenty-years-20-firsts-tony-hawk-900.
45. Oracle VM VirtualBox®. Oracle Corporation, 2013. Online: http://www.virtualbox.org/manual/.
46. Emmanuel Owusu, Jun Han, Sauvik Das, Adrian Perrig, and Joy Zhang. ACCessory: Password inference using accelerometers on smartphones. In Rajesh Krishna Balan, editor, Proceedings of Hot-Mobile 2012. ACM Press, February 2012. Online: http://www.hotmobile.org/2012/papers/HotMobile12-final42.pdf.
47. Phisher Cat. Webcam light scaring slaves⋯. July 2013. Online: http://www.hackforums.net/showthread.php?tid=3660650. Registration required. Last accessed 2013-08-06.
48. Jason Pisani, Paul Carugati, and Richard Rushing. USB-HID hacker interface design. Presented at Black Hat Briefings, July 2010. Online: https://media.blackhat.com/bh-us-10/presentations/Rushing/BlackHat-USA-2010-Rushing-USB-HID-slides.pdf.
49. Sam Prell. Watch the Spelunky run that set a new high score record. joystiq, February 2014. Online: http://www.joystiq.com/2014/02/23/watch-the-spelunky-run-that-set-a-new-high-score-record/.
50. Reinhard Riedmüller, Mark M. Seeger, Harald Baier, Christoph Busch, and Stephen D. Wolthusen. Constraints on autonomous use of standard GPU components for asynchronous observations and intrustion detection. In Anna Brunstrom and Svein J. Knapskog, editors, Proceedings of IWSCN 2010. IEEE Computer Society, May 2010. Online: http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5497999.
51. Thomas Ristenpart, Gabriel Maganis, Arvind Krishnamurthy, and Tadayoshi Kohno. Privacy-preserving location tracking of lost or stolen devices: Cryptographic techniques and replacing trusted third parties with DHTs. In Paul Van Oorschot, editor, Proceedings of USENIX Security 2008. USENIX, July 2008. Online: http://adeona.cs.washington.edu/papers/adeona-usenixsecurity08.pdf.
52. Thomas Ristenpart, Gabriel Maganis, Arvind Krishnamurthy, and Tadayoshi Kohno. Adeona. October 2009. Online: http://adeona.cs.washington.edu/index.html.
53. Sebastian Rohde, Thomas Eisenbarth, Erik Dahmen, Johannes Buchmann, and Christof Paar. Fast hash-based signatures on constrained devices. In Gilles Grimaud and Frano is Xavier Standaert, editors, Proceedings of CARDIS 2008. Springer, September 2008. Online: https://www.hgi.rub.de/hgi/publikationen/fast-hash-based-signatures-constrained-devices/.
54. Roman Schlegel, Kehuan Zhang, Xiaoyong Zhou, Mehool Intwala, Apu Kapadia, and XiaoFeng Wang. Soundcomber: A stealthy and context-aware sound trojan for smartphones. In Adrian Perrig, editor, Proceedings of NDSS 2011. Internet Society, February 2011. Online: http://www.cs.indiana.edu/~kapadia/papers/soundcomber-ndss11.pdf.
55. Stop Police Brutality. Cop breaks 84 year old's neck for touching him. December 2013. Online: http://www.policebrutality.info/2013/12/cop-breaks-84-year-olds-neck-for-touching-him.html.
56. Robert Templeman, Zahid Rahman, David Crandall, and Apu Kapadia. PlaceRaider: Virtual theft in physical spaces with smartphones. In Peng Ning, editor, Proceedings of NDSS 2013. Internet Society, February 2013. Online: http://www.internetsociety.org/sites/default/files/02_2_0.pdf.
57. Alexander Tereshkin and Rafal Wojtczuk. Introducing ring -3 rootkits. Presented at Black Hat Briefings, July 2009. Online: http://www.blackhat.com/presentations/bh-usa-09/TERESHKIN/BHUSA09-Tereshkin-Ring3Rootkit-SLIDES.pdf.
58. The iPatch. The iPatch. 2011. Online: http://www.theipatch.com. Last accessed: 2013-08-07.
59. Craig Timberg and Ellen Nakashima. FBI's search for 'Mo,' suspect in bomb threats, highlights use of malware for surveillance. The Washington Post, December 2013. Online: http://www.washingtonpost.com/business/technology/fbis-search-for-mo-suspect-in-bomb-threats-highlights-use-of-malware-for-surveillance/2013/12/06/352ba174-5397-11e3-9e2c-e1d01116fd98_story.html.
60. Giorgos Vasiliadis, Michalis Polychronakis, and Sotiris Ioannidis. GPU-assisted malware. In Jean-Yves Marion, Noam Rathaus, and Cliff Zhou, editors, Proceedings of MALWARE 2010, pages 1-6. IEEE Computer Society, October 2010. Online: http://dcs.ics.forth.gr/Activities/papers/gpumalware.malware10.pdf.
61. Vimicro. VC0358 USB 2.0 Camera Processor, September 2012. Online: http://www.vimicro.com/english/product/pdf/Vimicro_VC0358_PB_V1.1.pdf.
62. Zhaohui Wang and Angelos Stavrou. Exploiting smart-phone USB connectivity for fun and profit. In Patrick Traynor and Kevin Butler, editors, Proceedings of ACSAC 2010, pages 357-366. ACM Press, December 2010. Online: http://dl.acm.org/citation.cfm?id=1920314.
63. Richard Wheatsone. Video: CCTV footage shows the moment masked armed robber holds gun at terrified shopkeeper's head. Mirror, February 2014. Online: http://www.mirror.co.uk/news/uk-news/urmston-armed-robbery-cctv-footage-3149475.
64. ZTech. QuickCam Pro 9000 LED Control. Post on the Logitech Forums, February 2008. Online: http://forums.logitech.com/t5/Webcams/QuickCam-Pro-9000-LED-Control/td-p/186301. Last accessed: 2013-08-06.