Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
Tools for controlling webcam LED on ThinkPad X230. Contribute to xairy/lights-out development by creating an account on GitHub.
cross-posted from: https://lemmy.bestiver.se/post/121053
You're viewing a single thread.
Why the fuck isn’t there just a simple status LED that is on the same circuit as the camera? If the camera is on, the LED is on. Period.
Why the fuck isn’t there just a simple status LED that is on the same circuit as the camera?
Because cameras aren't simple on-off devices powered by a single wire, that's why. It's always got power, and it's turned "on" (send image data over the data bus) and "off" (do not send data) by software commands over the same data bus.
So the most convenient solution is then have the camera IC have an output that can drive an indicator light. And as camera ICs are basically full computers in their own right, they can be reprogrammed so that they don't turn on that output.
End result is that you are much better off either having a physical cover over the camera lens, or having a USB camera that you can unplug.
Framework laptops solve this by having physical switches for the camera and microphone at the top of edge of the screen. Can’t get safer than that except for physical removal.
Note that these switches mainly trigger a magnetic sensor to switch the power to the camera
It's not physically disconnecting it.
And in theory you can move the bezel away from the display a bit to activate the camera, if you have physical access (although you'd probably notice if something bulges the bezel)