Skip to main content

Webcam Hack- Apple pays record $100,500 to student who found Mac webcam hack

A cyber security student has shown Apple how hacking its Mac webcams can then also leave devices fully open to hackers, earning him $100,500 from the company's bug bounty program.

Ryan Pickren, who previously discovered an iPhone and Mac camera vulnerability, has been awarded what is believed to be Apple's largest bug bounty payout.

According to Pickren, the new webcam vulnerability concerned a series of issue with Safari and iCloud that he says Apple has now fixed. Before it was patched, a malicious website could launch an attack using these flaws.

In his full account of the exploit, Pickren explains it would give the attacker full access to all web-based accounts, from iCloud to PayPal, plus permission to use the microphone, camera, and screensharing. If the camera were used, however, its regular green light would still come on as normal.

Pickren reports that the same hack would ultimately mean that an attacker could gain full access to a device's entire filesystem. It would do so by exploiting Safari's "webarchive" files, the system the browser uses to save local copies of websites.

"A startling feature of these files is that they specify the web origin that the content should be rendered in," writes Pickren. "This is an awesome trick to let Safari rebuild the context of the saved website, but as the Metasploit authors pointed out back in 2013, if an attacker can somehow modify this file, they could effectively achieve UXSS [universal cross-site scripting] by design."

A user has to download such a webarchive file, and then also open it. According to Pickren, this meant Apple did not consider this a realistic hack scenario when it first implemented Safari's webarchive.

"Granted this decision was made nearly a decade ago, when the browser security model wasn't nearly as mature as it is today," says Pickren.

Tightening security

"Prior to Safari 13, no warnings were even displayed to the user before a website downloaded arbitrary files," he continued. "So planting the webarchive file was easy."

Apple has not commented on the bug, nor is it known if it has been actively exploited. But Apple has paid Pickren $100,500 from its bug bounty program, $500 more than previously reported pay outs.

The bug bounty program can officially award up to $1 million, and the company publishes a list of maximum sums per category of security issue reported. There is no requirement for security experts to publicly disclose how much they've been awarded.

So it's possible that Apple has paid out more than Pickren's $100,500. However, the company has previously been greatly criticized for paying less than its own maximums, as well as for being slow to patch reported bugs.

Comments

Post a Comment

Popular posts from this blog

10 Fun Linux Command-Line Programs You Should Try When Bored

The Linux terminal is a powerful utility. You can use it to control the whole system, crafting and typing commands as you go about doing your everyday tasks. But it can quickly become overwhelming to keep staring at a command line and carry on with your work. Lucky for you, the terminal is also a source of fun. You can play around with commands, listen to music, and even play games. Although expecting a great deal of entertainment from a window full of commands would be carrying it too far, you can find utilities to bind some time when bored. Here are some fun and entertaining commands every Linux user should try at least once. 1. CMatrix Starting off the list with a fun tool every Linux user loves, CMatrix is a command-line utility that generates the classic "The Matrix" animation from the popular movie franchise of the same name. You can expect to see some great animations in different colors that you also get to customize. Albeit CMatrix uses regular fonts instead of the o...
Post a Comment
Read more

OpenSubtitles Hacked, 7 Million Subscribers' Details Leaked Online

OpenSubtitles, one of the largest repositories of subtitle files on the internet, has been hacked. Founded in 2006, the site was reportedly hacked in August 2021 with the attacker obtaining the personal data of nearly seven million subscribers including email and IP addresses, usernames and passwords. The site alerted users yesterday after the hacker leaked the database online. OpenSubtitles is one of the largest and most popular subtitle repositories on the Internet. Millions of subtitle files are downloaded every week in many languages, often to be paired with downloaded movies and TV shows. The site was founded in 2006 by a Slovakian programmer who came up with the idea while drinking a few beers at a local pub. Following an announcement late yesterday, more beers might be needed to cope with an emerging crisis. OpenSubtitles Hacked, Millions of Subscribers’ Details Exposed In a post to the OpenSubtitles forum, site administrator ‘oss’ reveals that the site – which h...
Post a Comment
Read more

Teachers Hacked- Hackers steal $500 to $2,500 from teachers

An investigation is on after bank accounts of Filipino teachers were reportedly hacked by a still unknown group, the Land Bank of the Philippines and the Department of Education (DepEd) said on Monday (January 24, 2022). State-owned Land Bank of the Philippines (also known as Landbank) said the Filipino teachers whose bank accounts were hacked lost money via “phishing”. The bank, however, said its system is safe. It was not immediately clear how many teachers were hit by the latest online heist. “According to the initial investigation by Landbank, the devices of the teachers were hacked via phishing, which compromised their personal information,” the bank said in a statement. “The bank has already reached out to the affected customers and is working on the resolution of these isolated cases at the soonest possible time,” it added. The state-owned Landbank is the official depository bank of the Philippine government. The teachers are the latest victims of rising online scams...
Post a Comment
Read more