Apple FaceTime Eavesdropping Bug

Please be advised that a snooping bug has been found in Apple’s FaceTime App. The bug exists in the apps Group Facetime feature and is triggered when someone makes a call using FaceTime and uses the “Add Person” option when the dialed number begins to ring to add themselves. Once the caller adds him/herself, a group FaceTime call will begin with audio feed from the phone of the person being called, even if the call has not been answered. Further, if the person being called hits the Power button when picking up their phone, video feed (accompanying the audio feed) gets sent to the caller.

Apple has disabled the Group FaceTime feature and stated that they will issue an update later this week. You may want to disable the FaceTime app until a patch/update becomes available and you have performed the update.

To disable FaceTime, go to Settings, FaceTime and turn the slider to the off position as shown below:

Screenshot showing the Apple settings for FaceTime with the toggle slider positioned to "off". A note at the bottom instructs how to turn the FaceTime app off and says that you can turn it back on once the patch is out and you've received it.

Image courtesy of naked security

Resources: