August 17, 2018

Apple let Uber secretly record iPhone screens

07 October 2017, 12:08 | Ross Houston

Apple let Uber secretly record iPhone screens

Apple let Uber secretly record iPhone screens

Security researcher Will Strafach has discovered that Uber had been granted access to an undocumented, private app permission allowing its app to access the screen-recording feature on iPhones.

If someone could compromise the Uber app through a security flaw, they'd be able to use the app's screen recording privilege to spy on any number of things on your device, including two-factor auth texts and passwords.

Despite the likes of Greyball and other rather dubiously purposed apps, such as "Hell", created to track Uber drivers moonlighting for rivals, there's no suggestion that Uber is using this technology for nefarious purposes.

Uber says the entitlement was used for something far less nefarious than tracking drivers or surveilling users: Improving performance in its Apple Watch app. Strafach noted that he looked for indications that the entitlement had been used maliciously and found none. It enabled the app to run the memory-intensive rendering of maps on the iPhone and then send the image to the Watch app.

An Uber spokesperson told the Independent: "This API was only used for a short period of time on an old version of our Apple Watch app". Uber said that it will be removing the entitlement from its app soon, but for those who wish to take cybersecurity in their own hands, you might want to delete the Uber app from your iPhones until that happens.

Radhe Maa sits on SHO's chair, probe on
Standing next to her is the SHO Sanjay Sharma himself with folded hands and a red stole hanging around his neck. Sharma and five more policemen have been sent to district lines over the incident, said Joint CP Eastern Range.

Cowboys still in disbelief, awe over Aaron Rodgers' third-and
Out of all the talented receiving options on the Green Bay Packers , one stands above the rest inside the 20-yard line. This week, the Dallas Cowboys (2-2) will be home once again as they host the Green Bay Packers (3-1) on Sunday.

Vehicle 'infotainment' systems may increase distracted driving, AAA says
Researchers rated 23 of the 30 vehicles "very high" or "high" in terms of the attention they demanded from drivers. Texting while driving is a well-known distraction for drivers, exponentially increasing the likelihood of a crash.

"It's not connected to anything else in our current codebase and the diff [sic] to remove it is already being pushed into production".

"Essentially it gives you full control over the framebuffer, which contains the colours of each pixel of your screen. So they can potentially draw or record the screen", Luca Todesco, a researcher and iPhone jailbreaker, told Gizmodo. This may have lead to passwords and other sensitive information getting stolen by a hacker or the brand itself.

It's surprising that despite Uber's dismal record on users' privacy, Apple allowed the company to have the special treatment. The firm added that it is working with Apple to remove the API completely.

The entitlement first appeared in Uber's app around the time of the original Watch launch in 2015, according to Strafach. For example, the so-called Hell program of Uber allegedly allowed the company to monitor the activities of the drivers of rival Lyft, so some may think that the hidden feature could have also allowed Uber to keep track of customers' usage of the Lyft app.

After using internal Apple abilities to tag and track individual iPhone devices, even after they were wiped, former Uber CEO Travis Kalanick was summoned to Apple's headquarters.

Other News

Trending Now

Nadal saves 2 match points to enter China Open 2nd round
Open, rallied after a first-set drubbing to eliminate seventh-seeded Tomas Berdych of the Czech Republic 1-6, 6-4, 6-1. Cirstea, ranked 44 in the world, stunned the Czech Pliskova 6-1, 7-5 to reach the last eight.

European Union takes Ireland to court for failing to claim Apple tax bill
If the challenge, which could take as long as five years, is successful, the money will be returned to Apple . The Trump administration has yet to publicly weigh in on the matter.

Harvey Weinstein To Sue New York Times, Says Attorney
Weinstein, a Flushing native, co-founded Miramax and serves as co-chairman of The Weinstein Company with his brother Bob. Over the a year ago , I've asked Lisa Bloom to tutor me, and she's put together a team of people.

Three US Army commandos killed in firing in southwest Niger
President Donald Trump was briefed on the deaths, said Sarah Huckabee Sanders, the White House spokesman. In mid-June, Niger mounted a new military operation in the Tillaberi region to take on the armed groups.

Spacewalking astronauts making repairs on International Space Station in October
One LEE is connected to the ISS by attaching the arm to the station; the other is extended into space and grabs the objects. They duo have been assigned to revolve around getting the Canadian robotic arm in good shape for doing work outside ISS.

Syria draws with Australia 1-1 in World Cup qualis playoff
Leading 1-0 five minutes from the end of regular time, the Socceroos were on the brink of winning the first leg in Malaysia . But Leckie made amends in the 29th minute when he cut inside and unleashed a shot which deflected in off Kruse.

Major League Baseball announces start time for Indians-Yankees ALDS Game 3
New York Yankees starting pitcher Sonny Gray (55) pitches against the Tampa Bay Rays in the first inning at Yankee Stadium. Clayton Kershaw looks as good as ever, and they picked up Yu Darvish, the former Rangers ace, midseason.

From Gerrymandering to Gay Rights, Supreme Court Faces 'Blockbuster' Term
There's every reason to believe few of the court's members - none besides Kennedy, perhaps - will actuallyy weigh the evidence. Excessively partisan redistricting is fundamentally unethical, anti-democratic and un-American.

Officials say Las Vegas shooter specifically requested corner suite on 32nd floor
Investigators trying to establish the motive for the attack have had little more to chase than hints and shadows. Paddock booked one room for August 1, 2017, which is two days before the first day of the festival.

Street Fighter 5: Arcade Edition Release Confirmed For 2018
This same release date was also mentioned by the previously reported listing, which means that it is probably not a placeholder. Street Fighter V Arcade Edition is launching January 16th 2018, check out the teaser trailer above and some screens below.