Revisiting webcam covers
rubenerd.com
rubenerd.com
[1] https://pbs.twimg.com/media/ERqCfdkX0AEWTN_?format=jpg&name=...
Some automatically send video, some don’t. I try to configure them not to start video by default but for whatever reason, one of them always does.
I recognize that this is more awkward than most people want. But the built in cameras (and third party too) are so terrible that it’s worth it to me.
There's also https://vdo.ninja/ (previously obs.ninja) that doesn't require any special apps. You open up a browser on your smartphone and input the link into OBS as a browser source. The performance on Chrome is superior to other Android browsers in my experience. There's a bit of delay and the quality isn't quite as good as OBS as the connection goes through the internet and isn't local, but the delay is actually surprisingly small.
Is anyone really going to try find a novel rootkit on their daily driver windows thinkpad or airbook, when you could more easily set up a honeynet if you were hunting that threat. Without a honeypot, pulling apart your workstation means you are your own control group, and you just start losing your mind. To me that seems like spending a day to source and replace a UART in a cheap pair of headphones instead of replacing them. If I still ran linux or a bsd I would pay more attention, but running a commercial OS is already being at such a disadvantage that the effort doesn't justify the results. Instead, there is a room or a box that electronics go in when they aren't being used.
Software security controls are a speedbump for the threat actors most of us deal with. If they want to get you, they will. Cam covers and physical controls are the best possible controls because they do what they are. The same cannot be said for software.
I have seen what IT do when they 'replace the sim card on your phone' it involes looking through all your pictures and reading all your messages.
As for companies that say they are not providing hardware and you have to use your personal hardware / phone / whatever for your job. Fuck them.
Ultimately Apple should probably build this in given their “privacy” messaging.
But in any case, I think surreptitious microphone access is a bigger problem than this, and there’s no easy solution to it.
I would like to see more and more of these physical kill switches, hopefully kind of like the silent switches on my iPhone, but maybe with little sliding locks to keep them in position.
I think there's a pretty healthy market for privacy/security/control-oriented hardware.
I find this popular trend of webcam sliders for purported security reasons is mere security theatre as long as microphones cannot be physically disconnected.
I can't paint on it without trying to unglue that and ultimately break it.
I don't think they would actually use the bypassable filter in everyone's camera, maybe just political dissidents, but having the red dot be the standard would make it less noticable when a bypassable filter is deployed.
We just slide it half way, then there's no irritating red dot and the camera is still covered.
A little Ghostbusters symbol - even in red - would work much better.
I worry much more about the microphone, not just in my laptop, but in my phone, and in who knows what other devices that have the insidious things hidden away. I wish there was a way to block microphones with tape to kill any audio pickup when not wanted. It's harder to manage than cameras, making camera covers something like privacy theater if the microphones are going to be left unblocked.
Yeah I know about the Pinephone with its microphone kill switch, but that switch is apparently quite a pain to operate. If I get a Pinephone I'm likely to leave the mic permanently shut off, and simply use an external or bluetooth mic if I want to make a voice call.
I get the appeal of webcam covers; they’re a quick and simple alleviation to the idea of a “peeping Tom”, but if someone can see through your camera when you don’t want them to, they probably already have control of other things on the computer. They could install a keylogger and siphon my documents/photos for more blackmail material.
Maybe I’m just dense because it never happened to me (AFAIK), but am I wrong?
I’m just saying that a sticker seems to be a bandaid on a possibly bigger issue.
My webcam on my own computers, no real fear. When that same device is USB connected to a work supplied computer? Zero trust.
What I'm defending against is one of the many apps I have to use for conferencing (Zoom, Google Meet, Bluejeans, Teams) starting up with the camera on when I'm not expecting it (and e.g. not wearing a shirt, my wife getting ready in the background, etc) for example because it was on last time I used that particular app.
One of the many reasons I try to avoid running the apps of "random" companies.
As far as I can test, Chrome does not have this option.