AVFoundation allows to Spy the user using the built in cameras without the user noticing.

Originator:mc
Number:rdar://15880263 Date Originated:2014-01-22
Status:Duplicate/15437140 Resolved:
Product:iOS SDK Product Version:7.0
Classification:Enhancement Reproducible:Always
 
I can't believe this can happen in 2014... I just discovered (Demo App on Request0 that using AVFoundation and for example AVCaptureDevicePositionFront the user can be totally spied without any warning. There's a warning for Audio/Microphone but none for Video.

Comments

Fixed on iOS 8!!!!

There's (at least in the Beta 2) finally a permission asked. The CRAZY thing is it asks both Camera & Microphone separately.... Listen to http://pomcast.com/2014/06/23/pom87/ about the subject.

By mc at June 23, 2014, 8:04 a.m. (reply...)

Da (Vinci?) Code

See http://stackoverflow.com/questions/21308456/avfoundation-allows-to-easily-spy-you.

By mc at Jan. 23, 2014, 1:28 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!