Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
U.S. Committee Sends Letter to Tim Cook Asking for Answers About Group FaceTime Eavesdropping Flaw
The U.S. Committee on Energy & Commerce is now seeking answers from Apple over the Group FaceTime flaw that allowed people to eavesdrop on conversations.
Energy and Commerce Chairman Frank Pallone Jr. (D-NJ) and Consumer Protection and Commerce Subcommittee Chairwoman Jan Schakowsky (D-IL) today sent a letter [PDF] to Apple CEO Tim Cook questioning the company about how long it took Apple to address the Group FaceTime flaw, the extent to which the flaw compromised consumer privacy, and whether there are other undisclosed bugs in existence.
Pallone and Schakowsky ask Apple a number of key questions, including the following:
The FaceTime vulnerability came to light last Monday after details spread across social media and news sites quickly picked it up. The bug allowed a person to force a FaceTime call with another person, giving them access to the audio (and sometimes video) from an iPhone, iPad, or Mac without the person ever accepting the FaceTime call.
Apple disabled Group FaceTime on its servers to prevent the bug from being used, and the company is still working on an iOS 12.1.4 update that we are expecting to see this week.
Subscribe to the MacRumors YouTube channel for more videos.
While Apple addressed the bug after it went viral on social media, the company was informed of the issue at least a week before when a teenager discovered it and his mother attempted to contact Apple. Though she sent in multiple reports, they did not go to the right people, and Apple has since apologized and said it is committed to improving the bug reporting process.
Apple is already facing a lawsuit over the Group FaceTime issue and New York officials are also investigating.
Energy and Commerce Chairman Frank Pallone Jr. (D-NJ) and Consumer Protection and Commerce Subcommittee Chairwoman Jan Schakowsky (D-IL) today sent a letter [PDF] to Apple CEO Tim Cook questioning the company about how long it took Apple to address the Group FaceTime flaw, the extent to which the flaw compromised consumer privacy, and whether there are other undisclosed bugs in existence.
"While these are wonderful tools when used right, the serious privacy issue with Group FaceTime demonstrates how these devices can also become the ultimate spying machines. That is why it is critical that companies like Apple are held to the highest standards," Pallone and Schakowsky wrote to Cook. "Your company and others must proactively ensure devices and applications protect consumer privacy, immediately act when a vulnerability is identified, and address any harm caused when you fail to meet your obligations to consumers."The two representatives ask Apple to be transparent about the investigation into the Group FaceTime vulnerability, and the steps that are being taken to protect consumer privacy going forward. Apple has not been as transparent as "this serious issue requires," according to the letter.
Pallone and Schakowsky ask Apple a number of key questions, including the following:
- When did your company first identify the Group FaceTime vulnerability that enabled individuals to access the camera and microphone of devices before accepting a FaceTime call? Did your company identify the vulnerability before being notified by Mr. Thompson's mother?
- Did any other customer notify Apple of the vulnerability?
- Please provide a timeline of exactly what steps were taken and when they were taken to address the vulnerability after it was initially identified.
- What steps are being taken to identify which FaceTime users' privacy interests were violated using the vulnerability? Does Apple intend to notify and compensate those consumers for the violation?
- When will Apple provide notification to affected consumers?
- Are there other vulnerabilities in Apple devices and applications that currently or potentially could result in unauthorized access to microphones and/or cameras?
The FaceTime vulnerability came to light last Monday after details spread across social media and news sites quickly picked it up. The bug allowed a person to force a FaceTime call with another person, giving them access to the audio (and sometimes video) from an iPhone, iPad, or Mac without the person ever accepting the FaceTime call.
Apple disabled Group FaceTime on its servers to prevent the bug from being used, and the company is still working on an iOS 12.1.4 update that we are expecting to see this week.
While Apple addressed the bug after it went viral on social media, the company was informed of the issue at least a week before when a teenager discovered it and his mother attempted to contact Apple. Though she sent in multiple reports, they did not go to the right people, and Apple has since apologized and said it is committed to improving the bug reporting process.
Apple is already facing a lawsuit over the Group FaceTime issue and New York officials are also investigating.
Tags: FaceTime, FaceTime Listening Bug
[ 97 comments ]
Top Rated Comments
(View all)
20 weeks ago
Probably not a good idea to have a congressional hearing about every software bug..
Let Apple's track record about privacy speak for itself.
Let Apple's track record about privacy speak for itself.
20 weeks ago
What a waste of time the letter is. Apple addressed it and the fix is being released soon.
They took over a week to respond to the formal complaint. That is not an acceptable grace period for 'privacy being top priority' in my view:
https://www.nytimes.com/2019/01/29/technology/facetime-glitch-apple.html
I think Apple is throwing stones from a glass house, and this won't be the last hiccup of theirs related to privacy
20 weeks ago
What a waste of time the letter is. Apple addressed it and the fix is being released soon.
20 weeks ago
Why would anyone in authority concern themselves with customer privacy when they want backdoors inserted so they can spy on everyone with ease?
A more honest question would be why can't you create these flaws for us to exploit Mr. Cook?
A more honest question would be why can't you create these flaws for us to exploit Mr. Cook?
20 weeks ago
People at Apple should be jailed for their handling of a bug of this magnitude.
Oh, so they shouldn't have turned off Group Facetime while fixing this bug? Or they shouldn't test their fix before releasing it to the public, potentially leaving the issue unresolved? Gee, how irresponsible of Apple. :rolleyes:
20 weeks ago
The patch is taking longer than expected to be released. This looks suspicious.
what.
Apple shut off the bug by disabling the feature that exposed it. There is no rush to release a patch because there is no possible exploit. If they rushed a hack out you'd be *****ing that they shipped buggy software.
20 weeks ago
People at Apple should be jailed for their handling of a bug of this magnitude.
So what do the people at Facebook get for their invasion of privacy and not having the ability to turn it all off as a user, and farming all of your personal details and every other contact on your devices?
20 weeks ago
They took over a week to respond to the formal complaint. That is not an acceptable grace period for 'privacy being top priority' in my view:
https://www.nytimes.com/2019/01/29/technology/facetime-glitch-apple.html
I think Apple is throwing stones from a glass house, and this won't be the last hiccup of theirs related to privacy
Actually, if you bothered to read the article you linked, it took one business day for Apple to respond to the formal report. She sent an actual bug report on a Friday, Apple disabled Group FaceTime the following Monday. I'd say that's much quicker than one would expect, given it was reported by a random woman and required entirely disabling a core iOS feature.
[doublepost=1549416394][/doublepost]
They shouldn't have ignored it for a week.
Try again.
[doublepost=1549416113][/doublepost]
This has absolutely nothing to do with the topic at hand.
Try again.
[doublepost=1549416146][/doublepost]
Translation: REEEE
They didn't ignore it for a week.
Try again.
[ Read All Comments ]
Apple today seeded the first beta of an upcoming tvOS 13 software update to its public beta testing group, giving non-developers a chance to try out the new software ahead of its fall public release....
Apple today seeded the fifth beta of an upcoming iOS 12.4 update to developers, two weeks after seeding the fourth iOS 12.4 beta, and over a month after releasing iOS 12.3, a major update that...
Apple today seeded the third beta of an upcoming macOS Mojave 10.14.6 update to developers, two weeks after seeding the second macOS Mojave 10.14.6 beta and more than a month after the release of...
Apple today seeded the fourth beta of an upcoming watchOS 5.3 update to developers, two weeks after releasing the third watchOS 5.3 beta and a month after the launch of watchOS 5.2.1, an update that...
B&H Photo is further discounting a set of previous generation iMacs, providing the lowest ever price for the 21.5-inch model with 8GB RAM and a 1TB Fusion Drive. You can get this model for...
Microsoft plans to launch a small foldable Surface tablet in the first half of 2020, according to Jeff Lin, an analyst at research firm IHS Markit.
Microsoft Surface Go
In an email shared...
Augmented reality game Harry Potter: Wizards Unite got a surprise early release last week in the U.S. and the U.K., and Niantic has now rolled the game out to a global audience.
Early Sunday...
For this week's giveaway, we've teamed up with Tap to give MacRumors readers a chance to win one of the company's wearable keyboards, which Tap believes is the keyboard of the future.
...
