Uber app could secretly record iPhone users' screens

Uber app could secretly record iPhone users' screens

Security researchers have said Uber's app for iOS was able to record an iPhone's screen, even if running in the background, reported Gizmodo. Neither Apple nor Uber has mentioned this function on any consumer platform. That exception was never rescinded, and its existence hypothetically allowed Uber, or a nefarious actor with access to Uber's network, to monitor an iPhone user's screen.

It was spotted by security researcher Will Strafach, who described it as "very unusual" and said it was "totally unprecedented" that Apple granted such a permission to the taxi-hailing app company.

After digging around in the code for Uber's app, Strafach discovered that it uses an entitlement called "com.apple.private.allow-explicit-graphics-priority".

Mobile app security analyzer Will Strafach detected a special, undocumented permission or "entitlement" granted by Apple that gives the Uber app the ability to spy on your iPhone without you knowing it.

According to Apple expert Luca Tudesco, it's the equivalent of giving an app keylogging abilities - meaning it can be used to steal sensitive information like log-ins and passwords - and it's unclear why Apple would grant such special privileges to the ride-sharing app, given its already poor record with regard to privacy.

The existence of Uber's access to special iPhone functions is not disclosed in any consumer-facing information included with Uber's app, despite giving the company direct access to features so powerful that Apple nearly always keeps them off limits to outside companies. It said the entitlement is not now being used.

Apple granted Uber special capabilities, including access to certain users' iPhone screens, according to multiple reports published Thursday. The firm added that it is working with Apple to remove the API completely.

Uber is now planning to get rid of the API from its iOS codebase. However, Uber said the entitlement was not used for any such thing like tracking the drivers or putting surveillance on the users.

The screen recording feature in question is taken advantage of by screen recording apps on jailbroken iPhones, allowing apps like iRec to capture screens without needing permission directly from Apple. Separately, a recent update to the iOS software allows users to control the access over their locations.

As of now, there has been no comment from Apple.

"It was used for an old version of the Apple Watch app, specifically to run the heavy lifting of rendering maps on your phone & then send the rendering to the Watch app", an Uber spokesperson told Gizmodo, saying that early Apple Watches couldn't handle this process alone.

Related News:

  • In Face of Las Vegas Shooting, Congressional Inaction

    In Face of Las Vegas Shooting, Congressional Inaction

    PAUL RYAN: One of the things we've learned from these shootings is that often underneath this is a diagnosis of mental illness. They have more in common with people in other Western nations who view America's gun laws as insane.
    Facebook testing an info button for links to combat fake news

    Facebook testing an info button for links to combat fake news

    If there is no information provided, like if a publisher doesn't have a Wikipedia page, Facebook will display that there is no additional data.
    Mitsubishi Shows More Of New e-Evolution Concept Ahead Of Tokyo

    Mitsubishi Shows More Of New e-Evolution Concept Ahead Of Tokyo

    Some of the popular showcase vehicles will be Eclipse Cross SUV, Outlander PHEV (plug-in hybrid Electric Vehicle) and so on. The main draw will be Mitsubishi's AI system, which will augment the capabilities of the driver, or so the company says.
  • Supreme Court takes up partisan redistricting case

    Supreme Court takes up partisan redistricting case

    At the same time, Kennedy has been a reliable vote in favor of the rights of political dissenters, such as flag-burners . State legislative and congressional districts are redrawn every 10 years , following the most-recent USA census.
    Sonny Melton's father reacts to son being a victim in Vegas massacre

    Sonny Melton's father reacts to son being a victim in Vegas massacre

    One of Murfitt's friends, Ryan Kopiasz, told The Washington Post Murfitt "always had an alert up when somebody needed him". I was laying on my brother shielding him. "I don't know their names", she said.
    Edward Heath Would Have Faced Sex Abuse Inquiry, Say UK Police

    Edward Heath Would Have Faced Sex Abuse Inquiry, Say UK Police

    An independent scrutiny panel said the investigation was "fair, sensitive and rigorous with regard to both victims and suspects". Any adult seeking support or advice can contact the NSPCC Helpline for free at any time on 0808 800 5000.
  • Senior Republicans consider banning 'bump stocks' in wake of Las Vegas massacre

    He added that it will be up to President Donald Trump to set the tone for a legislative response to the massacre in Las Vegas. For days, the National Rifle Association has remained silent, until releasing its statement on Thursday night.
    Harrison Ford and Ryan Gosling aren't as intimidating as they seem

    Harrison Ford and Ryan Gosling aren't as intimidating as they seem

    On whether he has been gotten overtures to direct Bond 25 , he said, "I can not talk about that". Ridley Scott's 1982 sci-fi neo-noir original extracted the frightful premise of Philip K.
    Three-Country Proposals Could Be Future of FIFA World Cup

    Three-Country Proposals Could Be Future of FIFA World Cup

    The bidding process for the 2030 World Cup is still years away. 1930 World Cup in Uruguay. Paraguay, which last qualified for the World Cup in 2010, has never hosted a World Cup.
  • Hurricane Recovery Boosts Auto Sales

    Hurricane Recovery Boosts Auto Sales

    Nissan Group reported sales increased 9.5% as the Nissan Division sales set a September record while Infiniti sales went up 12%. We're pleased to say recovery in Houston and Florida is moving quickly, with all of our dealers in the area now back up.
    Iraqi forces capture Hawija, nearby area from ISIS

    Iraqi forces capture Hawija, nearby area from ISIS

    USA -led coalition forces are now closing in on the Syrian city of Raqqa, the de facto capital of ISIS's self-declared caliphate. However, the relatively quick operation is a further sign that Isis territorial control is breaking down in Iraq.

    FDA to bakery: Love is NOT an ingredient in granola

    However, one mis-branding - as first spotted by Bloomberg - is particularly notable: the FDA's stance on "love" as an ingredient. The bakery's CEO, John Gates, told The Associated Press on Wednesday that the bakery will be "fully cooperative" with the FDA.

Most liked

Wayne Larrivee's Packers-Cowboys scouting report II: About Green Bay
Aaron Rodgers , if his veteran bookend tackles are back and he's given time, should shred the Dallas rebuilt secondary. Defensive coordinator Rod Marinelli said with a wry smile all he remembered was that the Packers "completed it".

Fleeing for their lives
It cited their reasons as "livelihood difficulties", health problems, a "belief" of insecurity and fear of becoming a minority. About 900,000 doses of cholera vaccine are due to arrive this weekend and a vaccination campaign should start on Tuesday.

Sasikala granted parole to visit ailing husband
In the parole order, a copy of which HT has accessed, the prison authorities have laid a series of conditions. Sasikala was the closest aide of Jayalalithaa and shared her upscale Poes Garden home in Chennai for decades.

Southgate admits England have long way to go
Gareth Southgate will be hoping Raheem Sterling carries his form during England training into the World Cup qualifiers, this week. Scotland's hopes of reaching Russian Federation remain alive after a late victor gave them a 1-0 victory over 10-man Slovakia .

Republicans Aim To Gut Medicaid And Medicare After "Repeal And Replace" Failure
Here's how it works: up to now, you could lower your tax liability by deducting your state and local taxes from your income. House Republicans and Speaker Paul Ryan have for years drawn up plans that would allow them to make deep cuts the program.

Las Vegas shooter Stephen Paddock 'disturbed and dangerous', spent decades acquiring weapons
His family said they don't know Stephen Paddock and had no knowledge of he and Marilou's relationship. Australian media said she was on holiday in the Philippines with three girlfriends.

P!NK Coming To Xcel Energy Center March 12
However, Pink didn't stop there on an extremely busy day of new announcements. "Exciting surprises coming tomorrow". A pre-sale will be made available to American Express cardholders on October 10 at 10 a.m.

Caught on camera: leopard enters Maruti Suzuki plant in Gurugram
The new model costs slightly higher than its predecessor with the base LXi trim now priced at Rs 4.15 lakh (ex-showroom, Delhi). Launched in 2014, Maruti Celerio was the first Indian vehicle with Auto Gear Shift (AGS) technology.

Catalonia ready to declare independence, says Carles Puigdemont
Spain's King Felipe took aim at Catalan leaders denouncing their independence vote as a threat to national stability. The EU executive has called again for the Spanish government and Catalan authorities to start dialogue.

UBS Keeps Rating And Raises Price Target On Netflix, Inc. (NFLX)
The company has a market capitalization of $79.64 billion, a price-to-earnings ratio of 224.39 and a beta of 1.09. The Domestic streaming segment includes services that streams content to its members in the United States.

SeaWorld Entertainment, Inc. (SEAS) Upgraded to "Sell" by BidaskClub
To measure price-variation, we found SEAS's volatility during a week at 6.64% and during a month it has been found around 4.29%. BidaskClub lowered SeaWorld Entertainment from a "sell" rating to a "strong sell" rating in a report on Wednesday, June 14th.

Student loan servicer Navient vows to fight PA Attorney General's lawsuit
Secretary of Education Betsy Devos to halt a "systematic rollback of critical student loan protections for student borrowers". Earlier this year, the Consumer Financial Protection Bureau, Illinois and Washington state also sued over the loan practices.

Stephen Paddock's Girlfriend 'I Never Saw Anything that Would be a Warning'
She said that Paddock told her the $100,000 he wired before the attack was for the purchase of a home for herself and her family. When a SWAT team stormed the room 72 minutes after the first 911 call was made, Paddock was found dead amongst the weapons.

Michigan Students to Speak with NASA Astronauts on Space Station
For Expedition 53 Commander Randy Bresnik , this is his second mission to the International Space Station . The three spacewalks have been scheduled with the goal of tinkering around the ISS.

Map shows targeted festival area on Las Vegas strip
But just because the gunfire sounded automatic doesn't necessarily mean that Paddock used automatic weapons. Police believe that Paddock took his own life. "Here's the reason why: Put two and two together".