a piece of mallware allows users to view media shock horror probe.
Bug in Flash Player allowed Mac webcam spying
Engineers on Thursday patched a hole in Adobe's ubiquitous Flash Player that allowed website operators to silently eavesdrop on visitors' webcam and microphone feeds without permission. To be attacked, visitors needed to do no more than visit a malicious website and click on a handful of buttons like the ones in this live …
coming soon to this comment sections:
PC people: Oh, look! Macs have a virus and are totally insecure! oh loook!
Apple people: No, No, no we're not, I mean, our macs are not. Windoze sucks!
etc.
Not Sic
> let along a SWF file
He actually said "let alone"
Light
Hopefully your webcam light would still go on, disabling that would be a real hack :)
Huh?
I wanted to read the comments but only have the option to post?http://www.theregister.co.uk/Design/graphics/icons/comment/unhappy_32.png
I keep a piece of tape over my webcam when not using it.
People used to accuse me of being paraoid. Guess I'm having the last laugh now.
Useless features
From day one I've wondered why Flash would ever need microphone or webcam access, and to this day I've yet to see a single legitimate use for it. Get rid of it if you can't secure it properly Adobe, sheesh. And while you're at it, take Javascript and other rubbish "active content" support out of your PDF reader...
Provide the functionality, and someone will use it.
"From day one I've wondered why Flash would ever need microphone or webcam access."
At least one conference app (GVO Live) is written in Flash. It's pretty slick, too. YouTube uses it to record videos from a user's camera instead of making the user upload it.
Umm...
The Flash player settings manager keeps website and global privacy setting data for individual computers on Adobe servers?
Well, that's a little disconcerting, to say the least.
Flash invariably fails to detect my webcam, even if I want it to.
So I guess I'm safe from this.
any more proof required?
Just remove this junk from your computer and mobile devices...
Hey El Reg - how about sorting out your comments system!
So we can actually flippin well see what people have posted without waiting a day!
Sign up, sign up for The Register's weekly IT security newsletter - click here
Popular Whitepapers
- The BI Inflexion Point
Information is a right, not a privilege - VPN security - if you want it, come and get it
Attention WiFi hotspotters: You want it - The Register Guide to iSCSI
A primer on Internet SCSI, a protocol to transport SCSI commands over IP - Secure Mobile Working
Beyond the Technology - The Impact of IT Security Attitudes
Putting the pieces in place for effective security delivery - The Register guide to unified communications
A primer on the implications of unified communications for enterprise IT


