Forwarded from NoGoolag
Gotcha! A request!
Moreover, right after the “get device info” line there is an explicit opening of the camera device:
12–12 17:10:14.734 751 6924 I QCamera : <HAL><INFO> int qcamera::QCamera2Factory::cameraDeviceOpen(int, struct hw_device_t **): 405: Open camera id 0 API version 256
I check it once again with Chrome, and everything looks the same: if you take away the camera permission — nothing is in the log, and if you allow the app to access the camera — same logs appear.
Turns out that:
а) problem is not local
b) problem is not browser-specific.
What is interesting about that, is the fact that none of these browsers have ever requested a camera permission for any of the sites that participated in the test (and, however, for YouTube and google.com — too).
Taking all this discoveries into consideration I came up with two versions:
1) Either Big Brother is really watching us or
2) that oddly obfuscated noscript from Google triggers Camera API in browsers in order to fingerprint the user, but avoids accessing camera directly. That’s why there is no permission request popping up (however, if you look at the video at the beginning of the article closely, you can see how an LED blinks between opening and closing the camera, which raises certain concerns).
Browser’s logic here is simple: When initializing the Camera API, if there is no camera permission — do not do anything (do not even ask for it until there is a real necessity) and if there is one — initialize the cameras and check what kind of modules are there and what are they capable of (might be the reason why the camera slides out).
The user’s phone vendor, as it seems, programmed the camera software simply: whenever the camera is accessed — it slides out.
Afterall, turns out the issue is not as serious, as it seemed to be in the beginning and I’d like to believe that no photos are taken (anyway I’m not qualified enough neither to prove nor disprove that, maybe one of you, the readers, could do that).
However, the very fact that opening any webpage that has an embedded YouTube video iframe in it leads to a camera request (and even some communication with the module) is pretty sad and disturbing in terms of privacy and I think it’s worth the community’s attention.
What is your opinion?
Russian version: https://habr.com/ru/company/roskomsvoboda/blog/480056/
WRITTEN BY
Vadim Misbakh-Soloviov
Moreover, right after the “get device info” line there is an explicit opening of the camera device:
12–12 17:10:14.734 751 6924 I QCamera : <HAL><INFO> int qcamera::QCamera2Factory::cameraDeviceOpen(int, struct hw_device_t **): 405: Open camera id 0 API version 256
I check it once again with Chrome, and everything looks the same: if you take away the camera permission — nothing is in the log, and if you allow the app to access the camera — same logs appear.
Turns out that:
а) problem is not local
b) problem is not browser-specific.
What is interesting about that, is the fact that none of these browsers have ever requested a camera permission for any of the sites that participated in the test (and, however, for YouTube and google.com — too).
Taking all this discoveries into consideration I came up with two versions:
1) Either Big Brother is really watching us or
2) that oddly obfuscated noscript from Google triggers Camera API in browsers in order to fingerprint the user, but avoids accessing camera directly. That’s why there is no permission request popping up (however, if you look at the video at the beginning of the article closely, you can see how an LED blinks between opening and closing the camera, which raises certain concerns).
Browser’s logic here is simple: When initializing the Camera API, if there is no camera permission — do not do anything (do not even ask for it until there is a real necessity) and if there is one — initialize the cameras and check what kind of modules are there and what are they capable of (might be the reason why the camera slides out).
The user’s phone vendor, as it seems, programmed the camera software simply: whenever the camera is accessed — it slides out.
Afterall, turns out the issue is not as serious, as it seemed to be in the beginning and I’d like to believe that no photos are taken (anyway I’m not qualified enough neither to prove nor disprove that, maybe one of you, the readers, could do that).
However, the very fact that opening any webpage that has an embedded YouTube video iframe in it leads to a camera request (and even some communication with the module) is pretty sad and disturbing in terms of privacy and I think it’s worth the community’s attention.
What is your opinion?
Russian version: https://habr.com/ru/company/roskomsvoboda/blog/480056/
WRITTEN BY
Vadim Misbakh-Soloviov
Forwarded from the_dise
У ВК новогодняя иконка
Forwarded from ０００エクスプロイト
У меня есть идея
Forwarded from dp0sk.css
Кастом темы в сова в ре хочется...
Anonymous Poll
63%
Ждём пока маляр тайсон покрасит...
37%
Я вам запрещаю ставить кастом темы на сова в ре.
Forwarded from ０００エクスプロイト
Что (what) подарить?
Anonymous Poll
15%
Атлант расправил плечи - Айн Рэнд
0%
Ночное кино - Мариша Пессл
5%
Франческа - Дорж Бату (любая)
46%
Фанбук BTS/Exo ебать
34%
Любая манга
P.S. мне придётся ачько разорвать, чтобы осилить найти мангу, которую кое-кто не читал
０００エクスプロイト
Что (what) подарить?
Вы моей смерти хотите
Forwarded from Neural Shit
Пацанские цитаты + пословицы + цепи Маркова = пацанские пословицы:
>>И медведь летает, только тот который был предан
>>Был квас, так и курица станет лучшим другом
>>Будет хлеб — бойся драться с лимоном....
>>Она хамила так, как земля, плодовитая, как свинья
>>У нормального мужика на нашей улице праздник
>>Не страшно если духом смазливый, была бы тёща хороша
>>Гордость парня — шубу нажить да понты колотить
>>Главное чтоб человек был нужен, а зубы сыщутся
>>Мудрецу даны знания, мужику умения, пацану — бухло
>>Старого деда невозможно е*бать!
>>Лишь спортивный костюм всегда стремится к лучшему, при этом сразу, не бойся когда в омуте черти заведутся
>>Цените домашних девушек, а крышку найдём
>>И медведь летает, только тот который был предан
>>Был квас, так и курица станет лучшим другом
>>Будет хлеб — бойся драться с лимоном....
>>Она хамила так, как земля, плодовитая, как свинья
>>У нормального мужика на нашей улице праздник
>>Не страшно если духом смазливый, была бы тёща хороша
>>Гордость парня — шубу нажить да понты колотить
>>Главное чтоб человек был нужен, а зубы сыщутся
>>Мудрецу даны знания, мужику умения, пацану — бухло
>>Старого деда невозможно е*бать!
>>Лишь спортивный костюм всегда стремится к лучшему, при этом сразу, не бойся когда в омуте черти заведутся
>>Цените домашних девушек, а крышку найдём