emfizz.com October 24, 2017

Uber's iOS app enabled it to record an iPhone's screen

07 October 2017, 12:06 | Bernard Bryant

Uber app can silently record iPhone screens, researcher finds

Uber App Demo

Will Strafach, a security researcher, discovered this week that Uber had been granted an undocumented private app permission allowing access to the screen-recording feature.

The screen recording capability comes from what's called an "entitlement" - a bit of code that app developers can use for anything from setting up push notifications to interacting with Apple systems such as iCloud or Apple Pay.

The iPhone maker gave Uber the extensive access, which could amount to an invasion of privacy if used to monitor devices, to improve how the Uber app worked with the Apple Watch.

Strafach said that to his knowledge, based on thousands of app binaries he has indexed, Uber is the only third-party app that was given a private entitlement.

At the March 2015 keynote about the watch, Kevin Lynch, Apple's vice president of technology, showcased the Uber app, including its ability to show the driver's location on a map.

An Uber spokesperson told the Independent: "This API was only used for a short period of time on an old version of our Apple Watch app".

Iraqi PM Haider al-Abadi announces recapture of ISIS bastion Hawija
The Iraqi army recaptured the town of Hawija on Thursday, forcing the "Islamic State" of their last stronghold. At one point it controlled almost a third of Iraqi territory. "Only the outskirts remain to be recaptured".

Spanish Bank Sabadell May Move HQ Out Of Catalonia Amid Tensions
Under Article 155 of the Spanish constitution , the government in Madrid is permitted to impose direct rule on autonomous regions. According to CNN , the Spanish Prime Minister considered the act to be a serious act of disobedience and disloyalty.

Street Fighter 5 to Finally Get Arcade Mode
Being the #1 requested addition to Street Fighter V , we're making sure it'll be an experience rather than just a mode. Capcom will be talking about more specific details regarding the new modes of play, and a UI overhaul, in future.

"You should know this API isn't connected to anything in our current codebase, meaning it's non-functional and there's no existing feature using it", said the spokesperson in an emailed statement.

Strafach told Gizmodo that although he looked for indications that the entitlement had been used for malicious purposes, he was unable to find any evidence of such activity.

"Essentially it gives you full control over the framebuffer, which contains the colors of each pixel of your screen. So they can potentially draw or record the screen", Luca Todesco, a researcher and iPhone jailbreaker, told news outlet Gizmodo. This may have lead to passwords and other sensitive information getting stolen by a hacker or the brand itself.

Strafach said he didn't know how, "even after [Uber] previously abused" the rules, Uber still "convinced Apple to let them have exclusive access to this privileged" entitlement. Uber was reportedly caught tracking iPhones even after the app was removed from the device. It was investigated by the Federal Bureau of Investigation for using a software that reportedly tracked drivers who worked for both Uber and its competitor Lyft.

According to a report in The New York Times, Apple CEO Tim Cook convened a meeting with Kalanick in 2015 when he found that Uber was directing his employees to help camouflage the ride-hailing app from Apple's engineers. Last month, the FBI opened an investigation into Uber over its "Hell" program, in which the company allegedly tracked drivers for rival company Lyft from 2014 to 2016, according to The Wall Street Journal.

Other News

Trending Now

Next Weeks Broker Price Targets For Premier Oil PLC (PMOIY)
Pictet North America Advisors SA bought a new stake in shares of BP p.l.c. during the 1st quarter worth approximately $128,000. It is positive, as 58 investors sold TSN shares while 202 reduced holdings. 12 were accumulated by Cornerstone Advsr.

Brett Favre admits he wanted to play for Dallas
Although Favre is Green Bay Packers royalty, it appears the legendary quarterback had dreams of playing for the Dallas Cowboys . As we all know, after the dust settles from the frenzy of activity in the offseason, there are real games to be played.

Tillerson denies wanting to resign as secretary of state
The secretary of state expressed frustration about the NBC News report, saying he had to "dispel this notion" several times. Mr Tillerson's denial lead to Mr Trump tweeting that NBC should apologise to the whole country for the "fake news".

What Are Analysts Suggestions On The Kraft Heinz Company (KHC)
The Kraft Heinz Company (NASDAQ: KHC ) shows a return on investment value of 5.30% evaluating the competency of investment. The company's distance from 52-week high price is -20.46% and the current price is 1.14% away from 52-week low price.

Japanese woman dies due to working 159 hours overtime
Since then, Prime Minister Shinzo Abe's administration has sought to improve working conditions in the country. Sado's parents said, "Even today, four years on, we can not accept our daughter's death as a reality".

Forza Studio Makes U-Turn on VIP Membership, Promises PC Performance Improvements
The "VIPs" under this system would only have the VIP bonuses for 25 races in total, which is basically a few hours worth of play. It is awesome how Turn 10 manages to make all of its over 700 cars look gorgeous with tracks that have dynamic weather.

Cubs have fifth-best odds to win World Series
That could end up being in Arizona's wheelhouse since power threats such as 1B Paul Goldschmidt, 3B Mike Lamb and RF J.D. This season, both the favored New York Yankees and Arizona Diamondbacks won their respective Wild Card games at home.

Rethink decision to table Bill to regularise guest teachers: LG to CM
The country is run on democracy, not bureaucracy. "As a responsible opposition we will not allow them to do so", he added. It will now have to be sent to the LG for approval and the political battle on it will only intensify.

Denver could help host 2026 FIFA World Cup
The city has been shortlisted by the United Bid Committee , which is coordinating North America's proposal to host. The US hosted the 1994 World Cup, which had the highest average attendance in the tournament's history.

Woman expecting yoga mat is delivered $400K in illegal drugs
Police said if you see a package sitting outside an empty home, contact the homeowner or police so they can come check it out. The post office knew she had moved and thought they would do her a favor by delivering it to her new address.